Phpgurukul Medical Card Generation System Cross-Site Request Forgery Vulnerability in Inquiry Management

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Inquiry Management feature of Phpgurukul Medical Card Generation System version 1.0. The issue resides in the admin inquiry reading endpoint, which allows authenticated administrators to delete inquiry records using a simple GET request. This action can be performed without a CSRF token or any validation of the request's origin.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of inquiry records by authenticated admin users.