3 matches found
CVE-2025-56074
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request...
CVE-2025-56074
The PHPGurukul Park Ticketing Management System v2.0 is vulnerable to a SQL Injection flaw in the foreigner-bwdates-reports-details.php file. The root cause is a lack of proper validation of the fromdate parameter against externally entered SQL statements. Remote attackers can exploit this by sen...
CVE-2023-27214
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...