Medium severity6.5NVD Advisory· Published Jun 27, 2025· Updated Jun 17, 2026

CVE-2025-50369

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.

Affected products

Phpgurukul/Medical Card Generation Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

github.com/1h3ll/CVEs/blob/main/CSRF-MANAGECARD_Medicalcard_Generations_System.mdnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000