SQL Injection Vulnerability in PHPGurukul Park Ticketing Management System
CVE-2025-45017

9.8CRITICAL

Key Information:

Vendor

PHPGurukul
Status
Park Ticketing Management System
Vendor
CVE Published:
30 April 2025

What is CVE-2025-45017?

The PHPGurukul Park Ticketing Management System v2.0 is susceptible to an SQL injection vulnerability in the edit-ticket.php file. This flaw permits remote attackers to manipulate SQL queries through the tprice POST parameter, potentially leading to unauthorized code execution and compromising database integrity. Attackers can exploit this vulnerability to extract sensitive data or alter site functionality, making it crucial for users to apply patches and monitor their systems for unusual activity.

References

https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Par...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.