CVE-2025-56075: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request...

CVE-2025-56075

The PHPGurukul Park Ticketing Management System v2.0 is susceptible to a SQL Injection vulnerability in the normal-bwdates-reports-details.php file. The root cause is a lack of proper validation for externally-entered SQL statements in the fromdate parameter during a POST request. A remote attack...

CVE-2025-45010: Improper Neutralization of Special Elements used in a Command

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...

CVE-2025-45020: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request...