CVE-2025-45020

CVE-2025-45020 concerns the PHPGurukul Park Ticketing Management System v2.0. The vulnerability exists in the file normal-bwdates-reports-details.php through the POST parameter todate , allowing remote attackers to inject arbitrary SQL code. This can lead to unauthorized database operations and h...

CVE-2025-45009

CVE-2025-45009 affects PHPGurukul Park Ticketing Management System v2.0. The vulnerability is HTML Injection in normal-search.php via the searchdata parameter, enabling remote attacker-controlled HTML output and potential code execution. Root cause: mishandling of the searchdata input. Impact per...

CVE-2025-45015

PHPGurukul Park Ticketing Management System v2.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the foreigner-bwdates-reports-details.php file. The issue allows remote attackers to inject arbitrary JavaScript code through the fromdate and todate parameters, potentially compromising ...

CVE-2025-4153

CVE-2025-4153 affects PHPGurukul Park Ticketing Management System 2.0. The vulnerability lies in the /profile.php file where manipulating the adminname parameter leads to SQL injection, exploitable remotely. Publicly disclosed exploit details exist; CVSS vectors in the entry indicate a network-re...

CVE-2025-45010

CVE-2025-45010 affects PHPGurukul Park Ticketing Management System v2.0 in the normal-bwdates-reports-details.php endpoint. The issue is HTML injection via the POST parameters fromdate and todate, enabling potential arbitrary code execution. No official fix/version is documented in the provided s...

CVE-2025-45011

CVE-2025-45011 : HTML Injection vulnerability in PHPGurukul Park Ticketing Management System v2.0’s /foreigner-search.php (parameter: searchdata). Root cause: improper handling of searchdata input leading to HTML injection and potential code execution. Affected component: foreigner-search.php in ...

CVE-2025-45018

CVE-2025-45018 is a SQL Injection vulnerability in PHPGurukul Park Ticketing Management System v2.0. The issue exists in the file foreigner-bwdates-reports-details.php and is exploitable via the todate parameter, allowing remote attackers to execute arbitrary SQL. Current connected documents conf...

CVE-2025-45017

CVE-2025-45017 affects PHPGurukul Park Ticketing Management System v2.0. A SQL injection in edit-ticket.php via the tprice POST parameter allows remote attackers to execute arbitrary code. The CVSS 3.1 score is 9.8 (CRITICAL) with NETWORK attack vector, LOW complexity, and no privileges required;...

CVE-2025-45019

The CVE-2025-45019 entry describes a SQL injection in PHPGurukul Park Ticketing Management System v2.0, specifically in the /add-foreigners-ticket.php endpoint. The vulnerability arises from improper handling of the cprice POST parameter, enabling remote attackers to manipulate SQL and potentiall...

CVE-2023-26959

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. Root cause: unsanitized input enables SQLi in the authentication query. Affected product/component: Phpgurukul Park Ticketing Management System 1.0 (backend user authentication). Impact per...

CVE-2024-54811

PHPGurukul Park Ticketing Management System v1.0 is affected by a SQL injection in /index.php via the login parameter. Root cause, per connected sources, is lack of input validation/external SQL handling, enabling execution of arbitrary SQL commands. Affected component: /index.php in PHPGurukul P...

CVE-2025-4781

CVE-2025-4781 affects PHPGurukul Park Ticketing Management System 2.0, specifically an SQL injection in the /forgot-password.php file caused by unsafely handled email/contactno parameters. The vulnerability arises from manipulation of those arguments, enabling remote exploitation and potential da...

CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the Admin Name parameter. The issue is documented across multiple sources, with Red Hat and other feeds confirming XSS in version 1.0. The root cause is unvalidated input for ...

CVE-2025-4780

The CVE-2025-4780 entry concerns PHPGurukul Park Ticketing Management System 2.0 with SQL injection in /foreigner-search.php caused by unsafely handling the searchdata parameter. The vulnerability can be exploited remotely and has public disclosure; multiple connected sources confirm the issue. R...

CVE-2025-4777

The CVE-2025-4777 entry concerns PHPGurukul Park Ticketing Management System 2.0. Affected component: /view-foreigner-ticket.php. Root cause: manipulation of the viewid parameter enables SQL injection. Impact: potential unauthorized database access, with remote exploitation implied by the descrip...

CVE-2025-4778

The CVE-2025-4778 entry concerns PHPGurukul Park Ticketing Management System 2.0. It affects the /normal-search.php file where the searchdata parameter can be manipulated to trigger an SQL injection, allowing remote exploitation. Public disclosure is noted. Connected sources consistently describe...

CVE-2025-4808

Summary (CVE-2025-4808) : Multiple sources report a SQL injection in PHPGurukul Park Ticketing Management System 2.0, caused by unsafely handling input in the file /add-normal-ticket.php. Specifically, manipulating parameters such as noadult , nochildren , aprice , and cprice enables injection at...

CVE-2025-4770

PHPGurukul Park Ticketing Management System 2.0 is affected by an SQL injection in /view-normal-ticket.php via the viewid parameter. Root cause: unsanitized input enables remote attacker to manipulate SQL, potentially exposing or modifying data. Public exploitation is indicated in multiple source...

CVE-2025-56075

The CVE-2025-56075 entry concerns a SQL Injection in PHPGurukul Park Ticketing Management System v2.0, specifically in the normal-bwdates-reports-details.php file. The vulnerability arises from unsafely handling the fromdate parameter in a POST request, enabling an attacker to inject arbitrary SQ...

CVE-2025-56074

The CVE-2025-56074 entry concerns PHPGurukul Park Ticketing Management System v2.0. The vulnerability is a SQL Injection in the file foreigner-bwdates-reports-details.php, exploitable via the fromdate parameter in a POST request. The underlying issue is lack of input validation that allows an att...