SQL Injection Vulnerability in PHPGurukul Park Ticketing Management System
CVE-2025-45020

7.2HIGH

Key Information:

Vendor

PHPGurukul
Status
Park Ticketing Management System
Vendor
CVE Published:
30 April 2025

What is CVE-2025-45020?

A SQL Injection flaw has been identified in the normal-bwdates-reports-details.php file of the Park Ticketing Management System, version 2.0, developed by PHPGurukul. This vulnerability permits remote attackers to execute arbitrary SQL code by manipulating the 'todate' parameter in a POST request, potentially compromising the system's integrity and exposing sensitive data.

References

https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Par...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.