← Database

CVE-2025-45019

MEDIUM CVSS: 5.4 Published: 2025-04-30 Modified: 2026-06-17

Description

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter.

Affected Platforms

Phpgurukul Park Ticketing Management System

Weakness Type

CWE-89, CWE-89

References