VULNERABILITY INTELLIGENCE

CVE-2025-45017

CVSS score9.8 CRITICAL

EPSS probability0.83%

CISA KEVNot currently listed

Published2025-04-30

Last modified2026-06-17

Description

A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter.