← Database

CVE-2025-45009

MEDIUM CVSS: 5.3 Published: 2025-04-30 Modified: 2026-06-17

Description

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter.

Affected Platforms

Phpgurukul Park Ticketing Management System

Weakness Type

CWE-77

References