https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-50370.htmlhttps://patchthecve.com/cve/CVE-2025-50370.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.5: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ahttps://patchthecve.com/cve/CVE-2025-50369.htmlhttps://patchthecve.com/cve/CVE-2025-50369.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.5: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifyinhttps://patchthecve.com/cve/CVE-2025-50367.htmlhttps://patchthecve.com/cve/CVE-2025-50367.htmlWed, 17 Jun 2026 09:35:02 +0000MEDIUM 6.1: A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.https://patchthecve.com/cve/CVE-2025-6613.htmlhttps://patchthecve.com/cve/CVE-2025-6613.htmlWed, 17 Jun 2026 10:02:15 +0000LOW 3.5: A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0. Affected by this vulnerability is an unknown functionality of the file /doctor/manage-patient.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotelhttps://patchthecve.com/cve/CVE-2025-6570.htmlhttps://patchthecve.com/cve/CVE-2025-6570.htmlWed, 17 Jun 2026 10:02:10 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotelyhttps://patchthecve.com/cve/CVE-2025-6301.htmlhttps://patchthecve.com/cve/CVE-2025-6301.htmlWed, 17 Jun 2026 10:01:34 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scripting. https://patchthecve.com/cve/CVE-2025-6288.htmlhttps://patchthecve.com/cve/CVE-2025-6288.htmlWed, 17 Jun 2026 10:01:32 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross sithttps://patchthecve.com/cve/CVE-2025-5913.htmlhttps://patchthecve.com/cve/CVE-2025-5913.htmlWed, 17 Jun 2026 09:49:00 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-5707.htmlhttps://patchthecve.com/cve/CVE-2025-5707.htmlWed, 17 Jun 2026 09:48:35 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of the argument testtype leads to sql injection. The attack may https://patchthecve.com/cve/CVE-2025-5706.htmlhttps://patchthecve.com/cve/CVE-2025-5706.htmlWed, 17 Jun 2026 09:48:35 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /new-user-testing.php. The manipulation of the argument state leads to sql injection. The attack can bhttps://patchthecve.com/cve/CVE-2025-5694.htmlhttps://patchthecve.com/cve/CVE-2025-5694.htmlWed, 17 Jun 2026 09:48:34 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may bhttps://patchthecve.com/cve/CVE-2025-5693.htmlhttps://patchthecve.com/cve/CVE-2025-5693.htmlWed, 17 Jun 2026 09:48:33 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. Thttps://patchthecve.com/cve/CVE-2024-51108.htmlhttps://patchthecve.com/cve/CVE-2024-51108.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 5.4: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate parahttps://patchthecve.com/cve/CVE-2024-51107.htmlhttps://patchthecve.com/cve/CVE-2024-51107.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 4.8: Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle, pagedes, and emailhttps://patchthecve.com/cve/CVE-2024-51106.htmlhttps://patchthecve.com/cve/CVE-2024-51106.htmlWed, 17 Jun 2026 08:05:24 +0000MEDIUM 4.6: A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle parameter.https://patchthecve.com/cve/CVE-2025-4736.htmlhttps://patchthecve.com/cve/CVE-2025-4736.htmlWed, 17 Jun 2026 09:33:53 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2025-44183.htmlhttps://patchthecve.com/cve/CVE-2025-44183.htmlWed, 17 Jun 2026 09:25:02 +0000MEDIUM 6.1: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.https://patchthecve.com/cve/CVE-2025-44182.htmlhttps://patchthecve.com/cve/CVE-2025-44182.htmlWed, 17 Jun 2026 09:25:02 +0000MEDIUM 6.1: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code.https://patchthecve.com/cve/CVE-2025-44181.htmlhttps://patchthecve.com/cve/CVE-2025-44181.htmlWed, 17 Jun 2026 09:25:01 +0000MEDIUM 6.1: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.https://patchthecve.com/cve/CVE-2025-44180.htmlhttps://patchthecve.com/cve/CVE-2025-44180.htmlWed, 17 Jun 2026 09:25:01 +0000MEDIUM 6.1: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}.https://patchthecve.com/cve/CVE-2025-4060.htmlhttps://patchthecve.com/cve/CVE-2025-4060.htmlWed, 17 Jun 2026 09:32:24 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-48703.htmlhttps://patchthecve.com/cve/CVE-2024-48703.htmlWed, 17 Jun 2026 07:58:41 +0000MEDIUM 4.8: PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/search-medicalcard.php via the searchdata parameter.https://patchthecve.com/cve/CVE-2024-10297.htmlhttps://patchthecve.com/cve/CVE-2024-10297.htmlWed, 17 Jun 2026 06:55:21 +0000MEDIUM 4.7: A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php of the component Managecard Edit Image Page. The manipulation of the argument editid leads to sql injectihttps://patchthecve.com/cve/CVE-2024-44798.htmlhttps://patchthecve.com/cve/CVE-2024-44798.htmlWed, 17 Jun 2026 07:53:07 +0000MEDIUM 4.8: phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters.https://patchthecve.com/cve/CVE-2024-29390.htmlhttps://patchthecve.com/cve/CVE-2024-29390.htmlWed, 17 Jun 2026 07:22:47 +0000HIGH 7.3: Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done by