CVE-2025-56074

CriticalCVSS 9.8

Published: 22/09/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

41th percentile - higher than 41% of all known CVEs

Summary

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially leading to disclosure, modification, or deletion of database data. This can result in breach of confidentiality and integrity of the system.

Recommendation

Update PHPGurukul Park Ticketing Management System to a version that fixes the vulnerability, if available. Until then, implement input validation and least privilege for the database account.

Other vulnerabilities in PHPGurukul Park Ticketing Management System

CVE-2025-56075Medium
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS