Lucene search
+L

621 matches found

CNNVD
CNNVD
added 2025/04/30 12:00 a.m.7 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the normal-bwdates-reports-details.php file. An attacker could use this vulnerability to...

7.2CVSS8AI score0.00536EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.11 views

PT-2025-18276 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A SQL injection issue was discovered in the foreigner-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary SQL code via the todate...

9.8CVSS8.3AI score0.0056EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/30 12:00 a.m.9 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the foreigner-bwdates-reports-details.php file. An attacker can exploit this vulnerabili...

9.8CVSS7.9AI score0.0056EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/30 12:00 a.m.79 views

CVE-2025-45015

PHPGurukul Park Ticketing Management System v2.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the foreigner-bwdates-reports-details.php file. The issue allows remote attackers to inject arbitrary JavaScript code through the fromdate and todate parameters, potentially compromising ...

6.1CVSS6AI score0.00315EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/30 12:00 a.m.6 views

CVE-2025-45018

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter...

8.7AI score0.0056EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/30 12:00 a.m.8 views

CVE-2025-45009

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter...

8.1AI score0.00334EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/30 12:00 a.m.33 views

CVE-2025-45010

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...

0.00334EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/30 12:00 a.m.76 views

CVE-2025-45011

CVE-2025-45011 : HTML Injection vulnerability in PHPGurukul Park Ticketing Management System v2.0’s /foreigner-search.php (parameter: searchdata). Root cause: improper handling of searchdata input leading to HTML injection and potential code execution. Affected component: foreigner-search.php in ...

5.3CVSS7.8AI score0.00334EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/30 12:00 a.m.73 views

CVE-2025-45018

CVE-2025-45018 is a SQL Injection vulnerability in PHPGurukul Park Ticketing Management System v2.0. The issue exists in the file foreigner-bwdates-reports-details.php and is exploitable via the todate parameter, allowing remote attackers to execute arbitrary SQL. Current connected documents conf...

9.8CVSS8.8AI score0.0056EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/30 12:00 a.m.7 views

CVE-2025-45020

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request...

8.9AI score0.00536EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/30 12:00 a.m.8 views

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

5.9AI score0.00315EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/30 12:00 a.m.8 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from improper handling of the fromdate and todate parameters in the normal-bwdates-reports-details.php file. No details of the...

5.3CVSS7.1AI score0.00334EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/30 12:00 a.m.10 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System has an HTML injection vulnerability that stems from improper handling of the searchdata parameter in the foreigner-search.php file. No details of the vulnerability are available at this time...

5.3CVSS7.2AI score0.00334EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/30 12:00 a.m.73 views

CVE-2025-45017

CVE-2025-45017 affects PHPGurukul Park Ticketing Management System v2.0. A SQL injection in edit-ticket.php via the tprice POST parameter allows remote attackers to execute arbitrary code. The CVSS 3.1 score is 9.8 (CRITICAL) with NETWORK attack vector, LOW complexity, and no privileges required;...

9.8CVSS8.8AI score0.00756EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/30 12:00 a.m.84 views

CVE-2025-45020

CVE-2025-45020 concerns the PHPGurukul Park Ticketing Management System v2.0. The vulnerability exists in the file normal-bwdates-reports-details.php through the POST parameter todate , allowing remote attackers to inject arbitrary SQL code. This can lead to unauthorized database operations and h...

7.2CVSS8.3AI score0.00536EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/04/30 12:00 a.m.28 views

CVE-2025-45011

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

0.00334EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.12 views

PT-2025-18274 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A Cross-Site Scripting XSS issue was discovered in the foreigner-bwdates-reports-details.php file. This issue allows remote attackers to inject arbitrary JavaScript code via...

6.1CVSS5.8AI score0.00315EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.14 views

PT-2025-18281 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the normal-search.php file, allowing remote attackers to execute arbitrary code via the searchdata parameter. This enables attackers...

5.3CVSS7.7AI score0.00334EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.10 views

PT-2025-18282 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A HTML Injection issue was discovered in the normal-bwdates-reports-details.php file. This issue allows remote attackers to execute arbitrary code via the fromdate and todat...

5.3CVSS7.5AI score0.00334EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/30 12:00 a.m.8 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the cprice parameter in the add-foreigners-ticket.php file. An attacker can exploit this vulnerability to query ...

9.8CVSS7.9AI score0.00442EPSS
SaveExploits1References1
Rows per page
Query Builder