A cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle parameter.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/0xBhushan/Writeups/blob/main/CVE/phpGurukul/Medical%20Card%20Generation%20System/Stored%20XSS-About%20Us.pdf | Exploit Third Party Advisory |
Configurations
History
28 May 2025, 01:00
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:anujk305:medical_card_generation_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Anujk305 medical Card Generation System
Anujk305 |
|
| References | () https://github.com/0xBhushan/Writeups/blob/main/CVE/phpGurukul/Medical%20Card%20Generation%20System/Stored%20XSS-About%20Us.pdf - Exploit, Third Party Advisory |
19 May 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-19 15:15
Updated : 2025-05-28 01:00
NVD link : CVE-2024-51106
Mitre link : CVE-2024-51106
JSON object : View
Products Affected
anujk305
- medical_card_generation_system
CWE
No CWE.