https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-50370.htmlhttps://patchthecve.com/cve/CVE-2025-50370.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.5: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ahttps://patchthecve.com/cve/CVE-2025-50369.htmlhttps://patchthecve.com/cve/CVE-2025-50369.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.5: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifyinhttps://patchthecve.com/cve/CVE-2025-50367.htmlhttps://patchthecve.com/cve/CVE-2025-50367.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.1: A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.https://patchthecve.com/cve/CVE-2025-5670.htmlhttps://patchthecve.com/cve/CVE-2025-5670.htmlWed, 17 Jun 2026 09:48:31 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exphttps://patchthecve.com/cve/CVE-2025-5669.htmlhttps://patchthecve.com/cve/CVE-2025-5669.htmlWed, 17 Jun 2026 09:48:31 +0000MEDIUM 6.3: A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosehttps://patchthecve.com/cve/CVE-2025-5668.htmlhttps://patchthecve.com/cve/CVE-2025-5668.htmlWed, 17 Jun 2026 09:48:30 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2024-51099.htmlhttps://patchthecve.com/cve/CVE-2024-51099.htmlWed, 17 Jun 2026 08:05:23 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the searchdathttps://patchthecve.com/cve/CVE-2024-48704.htmlhttps://patchthecve.com/cve/CVE-2024-48704.htmlWed, 17 Jun 2026 07:58:41 +0000MEDIUM 6.1: Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.https://patchthecve.com/cve/CVE-2024-51108.htmlhttps://patchthecve.com/cve/CVE-2024-51108.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 5.4: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate parahttps://patchthecve.com/cve/CVE-2024-51107.htmlhttps://patchthecve.com/cve/CVE-2024-51107.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 4.8: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle, pagedes, and emailhttps://patchthecve.com/cve/CVE-2024-51106.htmlhttps://patchthecve.com/cve/CVE-2024-51106.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 4.6: A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle parameter.https://patchthecve.com/cve/CVE-2025-2650.htmlhttps://patchthecve.com/cve/CVE-2025-2650.htmlWed, 17 Jun 2026 09:07:22 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be inithttps://patchthecve.com/cve/CVE-2024-48703.htmlhttps://patchthecve.com/cve/CVE-2024-48703.htmlWed, 17 Jun 2026 07:58:41 +0000MEDIUM 4.8: PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.php via the searchdata parameter.https://patchthecve.com/cve/CVE-2024-10301.htmlhttps://patchthecve.com/cve/CVE-2024-10301.htmlWed, 17 Jun 2026 06:55:22 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected is an unknown function of the file /admin/search-medicalcard.php of the component Search. The manipulation of the argument searchdata leads to sql injection. It is possible to launhttps://patchthecve.com/cve/CVE-2024-10300.htmlhttps://patchthecve.com/cve/CVE-2024-10300.htmlWed, 17 Jun 2026 06:55:22 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/view-enquiry.php of the component View Enquiry Page. The manipulation of the argument viewid leads to sql injection. The ahttps://patchthecve.com/cve/CVE-2024-10299.htmlhttps://patchthecve.com/cve/CVE-2024-10299.htmlWed, 17 Jun 2026 06:55:22 +0000MEDIUM 4.7: A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/view-card-detail.php of the component Managecard View Detail Page. The manipulation of the argument viewid leads to sql injection. The attack https://patchthecve.com/cve/CVE-2024-10298.htmlhttps://patchthecve.com/cve/CVE-2024-10298.htmlWed, 17 Jun 2026 06:55:22 +0000MEDIUM 4.7: A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-card-detail.php of the component Managecard Edit Card Detail Page. The manipulation of the argument editid leads to sql injection. It is possibhttps://patchthecve.com/cve/CVE-2024-10297.htmlhttps://patchthecve.com/cve/CVE-2024-10297.htmlWed, 17 Jun 2026 06:55:21 +0000MEDIUM 4.7: A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php of the component Managecard Edit Image Page. The manipulation of the argument editid leads to sql injectihttps://patchthecve.com/cve/CVE-2024-10296.htmlhttps://patchthecve.com/cve/CVE-2024-10296.htmlWed, 17 Jun 2026 06:55:21 +0000MEDIUM 4.7: A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/card-bwdates-reports-details.php of the component Report of Medical Card Page. The manipulation of the argument