PHPGurukul

Records1122All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical133CVSS 9.0–10.0

CVSS high107CVSS 7.0–8.9

Exploited now

PHPGurukul records in CISA KEV

No PHPGurukul vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hospital Management System 62 records HIGH Zoo Management System 37 records HIGH Art Gallery Management System 36 records HIGH Online Shopping Portal 33 records HIGH Online Fire Reporting System 32 records HIGH Complaint Management System 31 records HIGH Student Record System 29 records HIGH Beauty Parlour Management System 28 records HIGH

Records

20 records in Park Ticketing Management System · all components

TI-2025-35220 CVE-2025-56074 · GHSA-hq47-hfm9-9ww9

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php…

HIGH 82

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00477 Published 2025-09-22 No fix listed CWE-89

TI-2025-28722 CVE-2025-45019 · GHSA-m9f8-pw74-6fjf

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of…

HIGH 82

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2025-04-30 No fix listed CWE-89

TI-2025-28721 CVE-2025-45018 · GHSA-q378-crrr-qj69

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php…

HIGH 82

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00595 Published 2025-04-30 No fix listed CWE-89

TI-2025-28720 CVE-2025-45017 · GHSA-vq83-2wpf-54vg

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park…

HIGH 82

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2025-04-30 No fix listed CWE-89

TI-2024-36680 CVE-2024-54811 · GHSA-2j3v-9566-775v

A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management…

HIGH 82

A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2024-12-12 No fix listed CWE-89

TI-2025-03690 CVE-2025-4153 · GHSA-26wx-r897-chcf

PHPGurukul Park Ticketing Management System profile.php sql injection

HIGH 70

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00562 Published 2025-05-01 No fix listed CWE-74

TI-2025-28723 CVE-2025-45020 · GHSA-fph3-2wh6-46fv

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php…

HIGH 67

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00569 Published 2025-04-30 No fix listed CWE-89

TI-2025-28719 CVE-2025-45015 · GHSA-5c2r-7vmq-r33f

A Cross-Site Scripting (XSS) vulnerability was discovered in the…

MEDIUM 60

A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00335 Published 2025-04-30 No fix listed CWE-79

TI-2025-28718 CVE-2025-45011 · GHSA-cv46-v88f-9qx8

A HTML Injection vulnerability was discovered in the foreigner-search.php file of…

MEDIUM 59

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00345 Published 2025-04-30 No fix listed CWE-77

TI-2025-28717 CVE-2025-45010 · GHSA-f27c-q8cq-2ffp

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php…

MEDIUM 59

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00345 Published 2025-04-30 No fix listed CWE-77

TI-2025-28716 CVE-2025-45009 · GHSA-2ffg-57j4-xqr7

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul…

MEDIUM 59

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00345 Published 2025-04-30 No fix listed CWE-77

TI-2025-35221 CVE-2025-56075 · GHSA-m6r5-7j38-6246

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php…

MEDIUM 58

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0026 Published 2025-09-22 No fix listed CWE-89

TI-2025-04303 CVE-2025-4808 · GHSA-gm5r-42wg-m55j

PHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00658 Published 2025-05-16 No fix listed CWE-74

TI-2025-04277 CVE-2025-4781 · GHSA-39f6-jqc4-9rwp

PHPGurukul Park Ticketing Management System forgot-password.php sql injection

MEDIUM 57

A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00655 Published 2025-05-16 No fix listed CWE-74

TI-2025-04276 CVE-2025-4780 · GHSA-vphx-gjg2-4qff

PHPGurukul Park Ticketing Management System foreigner-search.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00425 Published 2025-05-16 No fix listed CWE-74

TI-2025-04274 CVE-2025-4778 · GHSA-2jjg-vj96-f833

PHPGurukul Park Ticketing Management System normal-search.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00462 Published 2025-05-16 No fix listed CWE-74

TI-2025-04273 CVE-2025-4777 · GHSA-26vj-q53w-3g76

PHPGurukul Park Ticketing Management System view-foreigner-ticket.php sql injection

MEDIUM 57

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00462 Published 2025-05-16 No fix listed CWE-74

TI-2025-04266 CVE-2025-4770 · GHSA-63p7-48v7-g6m9

PHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00462 Published 2025-05-16 No fix listed CWE-74

TI-2023-11844 CVE-2023-26959 · GHSA-cq9w-5wrx-333q

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.

MEDIUM 44

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2023-03-27 No fix listed CWE-89

TI-2023-11843 CVE-2023-26958 · GHSA-mfw3-w23p-mwgp

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting…

LOW 22

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00458 Published 2023-03-27 No fix listed CWE-79

Open these records in search →