CVE-2025-50370: CSRF
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-50370?
CVE-2025-50370 has been assessed as a high severity vulnerability due to its potential for unauthorized actions by using CSRF.
How do I fix CVE-2025-50370?
To fix CVE-2025-50370, implement CSRF protection measures such as tokens for the vulnerable endpoint in the Inquiry Management functionality.
What are the implications of CVE-2025-50370 for my organization?
CVE-2025-50370 may allow attackers to delete inquiry records, which could result in data loss and compromised system integrity.
Which versions of the Phpgurukul Medical Card Generation System are affected by CVE-2025-50370?
CVE-2025-50370 affects the Phpgurukul Medical Card Generation System version 1.0.
What specific functionality is vulnerable in CVE-2025-50370?
The vulnerable functionality in CVE-2025-50370 is the Inquiry Management feature accessible via /mcgs/admin/readenq.php.