Priority MEDIUM 58
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0026 · Published 2025-09-22 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00477 · Published 2025-09-22 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00658 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00655 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00425 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-05-16 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-05-01 · No fix listed CWE-74
Priority HIGH 67
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00569 · Published 2025-04-30 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00483 · Published 2025-04-30 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00595 · Published 2025-04-30 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00826 · Published 2025-04-30 · No fix listed CWE-89
Priority MEDIUM 60
A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00335 · Published 2025-04-30 · No fix listed CWE-79
Priority MEDIUM 59
A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2025-04-30 · No fix listed CWE-77
Priority MEDIUM 59
A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2025-04-30 · No fix listed CWE-77
Priority MEDIUM 59
A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2025-04-30 · No fix listed CWE-77
Priority HIGH 82
A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00631 · Published 2024-12-12 · No fix listed CWE-89
Priority MEDIUM 44
Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00832 · Published 2023-03-27 · No fix listed CWE-89
Priority LOW 22
Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00458 · Published 2023-03-27 · No fix listed CWE-79
THREATIST.IORead the docs