← Database

CVE-2025-45017

CRITICAL CVSS: 9.8 Published: 2025-04-30 Modified: 2026-06-17

Description

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter.

Affected Platforms

Phpgurukul Park Ticketing Management System

Weakness Type

CWE-89

References