CVE-2025-70064: Phpgurukul Hospital Management System

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-privileged user (Patient) can directly access the Administrator Dashboard and all sub-modules (e.g., User Logs, Doctor Management) by manually browsing to the /admin/ directory after authentication. This allows any self-registered user to takeover the application, view confidential logs, and modify system data.

Affected products

• Phpgurukul Hospital Management System: version 4.0 only

Published 2026-02-18. Last modified 2026-06-17.