CVE-2025-50370
BaseFortify
Publication date: 2025-06-27
Last updated on: 2025-07-01
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| anujk305 | medical_card_generation_system | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Cross-Site Request Forgery (CSRF) in the Inquiry Management functionality of the Phpgurukul Medical Card Generation System 1.0. It allows an authenticated admin to delete inquiry records by sending a simple GET request without requiring a CSRF token or verifying the request's origin, which means an attacker could trick the admin into performing unwanted actions.
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized deletion of inquiry records by exploiting an authenticated admin's session. This could result in loss of important data, disruption of service, and potential misuse of the system by attackers.