CVE-2025-50369: CSRF
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-50369?
CVE-2025-50369 is classified as a high severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2025-50369?
To fix CVE-2025-50369, implement CSRF tokens in your admin functionality to validate user requests.
What is the impact of CVE-2025-50369?
The impact of CVE-2025-50369 allows attackers to delete medical card records by exploiting the CSRF vulnerability.
Which software is affected by CVE-2025-50369?
CVE-2025-50369 affects PHPGurukul Medical Card Generation System version 1.0.
What functionality is vulnerable in CVE-2025-50369?
The Manage Card functionality at /mcgs/admin/manage-card.php is vulnerable in CVE-2025-50369.