Lucene search
+L

616 matches found

CNVD
CNVD
added 2025/05/13 12:0 a.m.1 views

Park Ticketing Management System normal-bwdates-reports-details.php file HTML injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from improper handling of the fromdate and todate parameters in the normal-bwdates-reports-details.php file. No details of the...

5.3CVSS7.2AI score0.00304EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/05/13 12:0 a.m.3 views

Park Ticketing Management System add-foreigners-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the cprice parameter in the add-foreigners-ticket.php file. An attacker can exploit this vulnerability to query ...

9.8CVSS8AI score0.00402EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/05/13 12:0 a.m.1 views

Park Ticketing Management System edit-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the tprice parameter in the edit-ticket.php file. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00704EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/03 7:11 a.m.24 views

CVE-2025-4153

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7.4AI score0.00478EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:14 a.m.19 views

CVE-2025-45018

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter...

9.8CVSS8.8AI score0.00522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:14 a.m.14 views

CVE-2025-45009

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter...

5.3CVSS8.1AI score0.00304EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:11 a.m.18 views

CVE-2025-45010

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...

5.3CVSS8.1AI score0.00304EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:11 a.m.17 views

CVE-2025-45017

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter...

9.8CVSS8.8AI score0.00704EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:11 a.m.22 views

CVE-2025-45020

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request...

7.2CVSS8.8AI score0.00499EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:8 a.m.16 views

CVE-2025-45011

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

5.3CVSS8.1AI score0.00304EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:8 a.m.20 views

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

6.1CVSS6AI score0.00293EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/01 7:15 a.m.4 views

CVE-2025-4153

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.8AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/01 6:31 a.m.7 views

CVE-2025-4153 PHPGurukul Park Ticketing Management System profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The...

7.5CVSS7.7AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/01 6:31 a.m.69 views

CVE-2025-4153

CVE-2025-4153 affects PHPGurukul Park Ticketing Management System 2.0. The vulnerability lies in the /profile.php file where manipulating the adminname parameter leads to SQL injection, exploitable remotely. Publicly disclosed exploit details exist; CVSS vectors in the entry indicate a network-re...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/01 6:31 a.m.34 views

CVE-2025-4153 PHPGurukul Park Ticketing Management System profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The...

7.5CVSS0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.6 views

PHPGurukul Park Ticketing Management System 注入漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter adminname in the /profile.php file that results in SQL injection. No details of the...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
OSV
OSV
added 2025/04/30 2:15 p.m.5 views

CVE-2025-45018

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter...

9.8CVSS6.3AI score0.00522EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/30 2:15 p.m.29 views

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

6.1CVSS0.00293EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/30 2:15 p.m.23 views

CVE-2025-45017

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter...

9.8CVSS0.00704EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/30 2:15 p.m.28 views

CVE-2025-45010

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...

5.3CVSS0.00304EPSS
SaveExploits1References1
Rows per page
Query Builder