Vulnerabilities

TI-2025-32118 CVE-2025-50370 · GHSA-g5xj-ff4p-6566

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management…

MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00155 Published 2025-06-27 No fix listed CWE-352

TI-2025-32117 CVE-2025-50369 · GHSA-887j-vqgm-7r8c

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality…

MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00155 Published 2025-06-27 No fix listed CWE-352

TI-2025-32116 CVE-2025-50367 · GHSA-944p-28qj-cj6m

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical…

MEDIUM 60

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00242 Published 2025-06-27 No fix listed CWE-79

TI-2024-34244 CVE-2024-51108 · GHSA-x6xg-9w9q-643p

Multiple stored cross-site scripting (XSS) vulnerabilities in the component…

MEDIUM 58

Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web s…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00262 Published 2025-05-23 No fix listed CWE-79

TI-2024-34243 CVE-2024-51107 · GHSA-xgcx-978m-c62h

Multiple stored cross-site scripting (XSS) vulnerabilities in the component…

MEDIUM 55

Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web script…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00267 Published 2025-05-23 No fix listed CWE-79

TI-2024-34242 CVE-2024-51106 · GHSA-vgrj-mg42-7vqg

A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of…

MEDIUM 54

A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injec…

CVSS 3.1MEDIUM 4.6 Local Low privileges User interaction EPSS 0.0023 Published 2025-05-19 No fix listed CWE-79

TI-2024-32467 CVE-2024-48703 · GHSA-q3rj-96fw-94q2

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting…

MEDIUM 55

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.php via the searchdata parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00274 Published 2024-12-06 No fix listed CWE-79

TI-2024-09542 CVE-2024-10297 · GHSA-7hrq-m3jx-vxhp

PHPGurukul Medical Card Generation System Managecard Edit Image Page changeimage.php sql injection

LOW 24

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00477 Published 2024-10-23 No fix listed CWE-89

Vulnerabilities

Filters