← Database

CVE-2025-45011

MEDIUM CVSS: 5.3 Published: 2025-04-30 Modified: 2026-06-17

Description

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter.

Affected Platforms

Phpgurukul Park Ticketing Management System

Weakness Type

CWE-77

References