CVE-2025-45020

A SQL Injection vulnerability exists in the PHPGurukul Park Ticketing Management System v2.0 within the normal-bwdates-reports-details.php file. The root cause is the improper handling of the todate parameter during a POST request , which allows remote attackers to execute arbitrary SQL code and ...

CVE-2025-4153

CVE-2025-4153 affects PHPGurukul Park Ticketing Management System 2.0. The vulnerability lies in the /profile.php file where manipulating the adminname parameter leads to SQL injection, exploitable remotely. Publicly disclosed exploit details exist; CVSS vectors in the entry indicate a network-re...

CVE-2025-45009

The PHPGurukul Park Ticketing Management System v2.0 is vulnerable to HTML Injection due to the mishandling of the searchdata parameter within the normal-search.php file. This flaw allows remote attackers to execute arbitrary code and inject malicious HTML, potentially leading to unauthorized act...

CVE-2025-45015

A Cross-Site Scripting (XSS) vulnerability exists in the PHPGurukul Park Ticketing Management System v2.0 . The flaw is located in the foreigner-bwdates-reports-details.php file and is caused by the improper handling of the fromdate and todate parameters. This allows remote attackers to inject ar...

CVE-2025-45010

A HTML Injection vulnerability exists in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0 . The root cause is the improper handling of the fromdate and todate POST request parameters, which allows remote attackers to execute arbitrary code. As of now...

CVE-2025-45011

The PHPGurukul Park Ticketing Management System v2.0 is vulnerable to an HTML Injection vulnerability in the foreigner-search.php file. The root cause is the improper handling and lack of sanitization of the searchdata POST request parameter in the /foreigner-search.php endpoint. This flaw allows...

CVE-2025-45017

A SQL injection vulnerability exists in the edit-ticket.php file of PHPGurukul Park Ticketing Management System v2.0 . The root cause is the improper handling of the tprice POST request parameter, which allows remote attackers to execute arbitrary code. While exploitation details are not provided...

CVE-2025-4781

CVE-2025-4781 affects PHPGurukul Park Ticketing Management System 2.0, specifically an SQL injection in the /forgot-password.php file caused by unsafely handled email/contactno parameters. The vulnerability arises from manipulation of those arguments, enabling remote exploitation and potential da...

CVE-2025-45018

The PHPGurukul Park Ticketing Management System v2.0 contains a SQL Injection vulnerability within the foreigner-bwdates-reports-details.php file. The root cause is the improper handling of the todate parameter, which allows remote attackers to execute arbitrary SQL commands by querying strings. ...

CVE-2025-45019

PHPGurukul Park Ticketing Management System v2.0 is vulnerable to a SQL injection vulnerability in the /add-foreigners-ticket.php file. The root cause is the improper handling of the cprice POST request parameter , which allows a remote attacker to inject malicious SQL commands into the server. W...

CVE-2024-54811

The PHPGurukul Park Ticketing Management System v1.0 is vulnerable to a SQL injection flaw in the /index.php file. The root cause is a lack of validation for externally entered SQL statements, which allows an attacker to execute arbitrary SQL commands via the "login" parameter . This could lead t...

CVE-2023-26959

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. Root cause: unsanitized input enables SQLi in the authentication query. Affected product/component: Phpgurukul Park Ticketing Management System 1.0 (backend user authentication). Impact per...

CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the Admin Name parameter. The issue is documented across multiple sources, with Red Hat and other feeds confirming XSS in version 1.0. The root cause is unvalidated input for ...

CVE-2025-4780

The CVE-2025-4780 entry concerns PHPGurukul Park Ticketing Management System 2.0 with SQL injection in /foreigner-search.php caused by unsafely handling the searchdata parameter. The vulnerability can be exploited remotely and has public disclosure; multiple connected sources confirm the issue. R...

CVE-2025-4778

The CVE-2025-4778 entry concerns PHPGurukul Park Ticketing Management System 2.0. It affects the /normal-search.php file where the searchdata parameter can be manipulated to trigger an SQL injection, allowing remote exploitation. Public disclosure is noted. Connected sources consistently describe...

CVE-2025-4777

The CVE-2025-4777 entry concerns PHPGurukul Park Ticketing Management System 2.0. Affected component: /view-foreigner-ticket.php. Root cause: manipulation of the viewid parameter enables SQL injection. Impact: potential unauthorized database access, with remote exploitation implied by the descrip...

CVE-2025-4808

Summary (CVE-2025-4808) : Multiple sources report a SQL injection in PHPGurukul Park Ticketing Management System 2.0, caused by unsafely handling input in the file /add-normal-ticket.php. Specifically, manipulating parameters such as noadult , nochildren , aprice , and cprice enables injection at...

CVE-2025-4770

PHPGurukul Park Ticketing Management System 2.0 is affected by an SQL injection in /view-normal-ticket.php via the viewid parameter. Root cause: unsanitized input enables remote attacker to manipulate SQL, potentially exposing or modifying data. Public exploitation is indicated in multiple source...

CVE-2025-56075

The PHPGurukul Park Ticketing Management System v2.0 is susceptible to a SQL Injection vulnerability in the normal-bwdates-reports-details.php file. The root cause is a lack of proper validation for externally-entered SQL statements in the fromdate parameter during a POST request. A remote attack...

CVE-2025-56074

The PHPGurukul Park Ticketing Management System v2.0 is vulnerable to a SQL Injection flaw in the foreigner-bwdates-reports-details.php file. The root cause is a lack of proper validation of the fromdate parameter against externally entered SQL statements. Remote attackers can exploit this by sen...