CVE-2025-50370
EUVD-2025-1941327.06.2025, 16:15
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| anujk305 | medical_card_generation_system | 1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration