CVE-2025-70062: CSRF
PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts (privileged users) by tricking an authenticated administrator into visiting a malicious page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70062?
CVE-2025-70062 is classified as a high severity vulnerability due to its potential for exploitation via unauthorized creation of privileged accounts.
How do I fix CVE-2025-70062?
To fix CVE-2025-70062, ensure proper CSRF token validation is enforced on the add-doctor.php endpoint.
Who is affected by CVE-2025-70062?
CVE-2025-70062 affects all users of PHPGurukul Hospital Management System version 4.0.
What type of vulnerability is CVE-2025-70062?
CVE-2025-70062 is a Cross-Site Request Forgery (CSRF) vulnerability.
What impact does CVE-2025-70062 have on the application?
CVE-2025-70062 allows remote attackers to create arbitrary doctor accounts, compromising the application's integrity and user privileges.