CVE-2025-70063: Medium severity Phpgurukul Hospital Management System vulnerability
The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the confidential medical records of other patients by iterating the 'viewid' integer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70063?
CVE-2025-70063 is classified as a high severity vulnerability due to its potential to expose sensitive patient data.
How do I fix CVE-2025-70063?
To fix CVE-2025-70063, implement proper authorization checks to ensure that users can only access resources associated with their own account.
What type of vulnerability is CVE-2025-70063?
CVE-2025-70063 is an Insecure Direct Object Reference (IDOR) vulnerability.
Which software is affected by CVE-2025-70063?
CVE-2025-70063 affects the Medical History module in PHPGurukul Hospital Management System v4.0.
What can attackers do with CVE-2025-70063?
Attackers can exploit CVE-2025-70063 to access and potentially manipulate the medical history of other patients.