Anuj Kumar Medical Card Generation System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:anujk305:medical_card_generation_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Anujk305 (5f6509d4-4e2f-53ca-a159-19c904ee1ea7) |
|---|---|
| Product | Medical Card Generation System (f18f9b40-e064-5c3e-9a52-5e14a443983d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-50370 |
vulnerable | 2026-06-08 07:31:10.910631 |
Details available
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.
Published: 2025-06-27T00:00:00.000Z
Updated: 2025-06-27T20:05:20.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50369 |
vulnerable | 2026-06-08 07:31:10.910246 |
Details available
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.
Published: 2025-06-27T00:00:00.000Z
Updated: 2025-06-27T20:04:31.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50367 |
vulnerable | 2026-06-08 07:31:10.909881 |
Details available
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.
Published: 2025-06-27T00:00:00.000Z
Updated: 2025-06-27T20:03:39.702Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51108 |
vulnerable | 2026-06-08 06:52:11.697400 |
Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate parameters.
Published: 2025-05-23T00:00:00.000Z
Updated: 2025-05-29T15:17:21.136Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51107 |
vulnerable | 2026-06-08 06:52:11.696995 |
Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle, pagedes, and email parameters.
Published: 2025-05-23T00:00:00.000Z
Updated: 2025-05-29T15:18:18.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51106 |
vulnerable | 2026-06-08 06:52:11.696607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48703 |
vulnerable | 2026-06-08 06:50:09.789215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10297 |
vulnerable | 2026-06-08 06:22:03.971090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.