CVE-2025-50369

EPSS 0.14%
Veröffentlicht 27.06.2025 00:00:00
Zuletzt bearbeitet 01.07.2025 18:13:49
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Anujk305 ≫ Medical Card Generation System Version1.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.034

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

https://github.com/1h3ll/CVEs/blob/main/CSRF-MANAGECARD_Medicalcard_Generations_System.md

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2025-50369

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-50369

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-50369

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-50369