https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56075.htmlhttps://patchthecve.com/cve/CVE-2025-56075.htmlWed, 17 Jun 2026 09:42:18 +0000MEDIUM 5.4: A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.https://patchthecve.com/cve/CVE-2025-56074.htmlhttps://patchthecve.com/cve/CVE-2025-56074.htmlWed, 17 Jun 2026 09:42:17 +0000CRITICAL 9.8: A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.https://patchthecve.com/cve/CVE-2025-4808.htmlhttps://patchthecve.com/cve/CVE-2025-4808.htmlWed, 17 Jun 2026 09:34:03 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be initiatehttps://patchthecve.com/cve/CVE-2025-4781.htmlhttps://patchthecve.com/cve/CVE-2025-4781.htmlWed, 17 Jun 2026 09:34:00 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of the file /forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. It is possible to launch the attack remotely. The explohttps://patchthecve.com/cve/CVE-2025-4780.htmlhttps://patchthecve.com/cve/CVE-2025-4780.htmlWed, 17 Jun 2026 09:33:59 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exphttps://patchthecve.com/cve/CVE-2025-4778.htmlhttps://patchthecve.com/cve/CVE-2025-4778.htmlWed, 17 Jun 2026 09:33:59 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2025-4777.htmlhttps://patchthecve.com/cve/CVE-2025-4777.htmlWed, 17 Jun 2026 09:33:59 +0000MEDIUM 6.3: A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The ehttps://patchthecve.com/cve/CVE-2025-4770.htmlhttps://patchthecve.com/cve/CVE-2025-4770.htmlWed, 17 Jun 2026 09:33:58 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. https://patchthecve.com/cve/CVE-2025-4153.htmlhttps://patchthecve.com/cve/CVE-2025-4153.htmlWed, 17 Jun 2026 09:32:36 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2025-45019.htmlhttps://patchthecve.com/cve/CVE-2025-45019.htmlWed, 17 Jun 2026 09:25:21 +0000MEDIUM 5.4: A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter.https://patchthecve.com/cve/CVE-2025-45018.htmlhttps://patchthecve.com/cve/CVE-2025-45018.htmlWed, 17 Jun 2026 09:25:21 +0000CRITICAL 9.8: A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter.https://patchthecve.com/cve/CVE-2025-45017.htmlhttps://patchthecve.com/cve/CVE-2025-45017.htmlWed, 17 Jun 2026 09:25:20 +0000CRITICAL 9.8: A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter.https://patchthecve.com/cve/CVE-2025-45015.htmlhttps://patchthecve.com/cve/CVE-2025-45015.htmlWed, 17 Jun 2026 09:25:20 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters.https://patchthecve.com/cve/CVE-2025-45011.htmlhttps://patchthecve.com/cve/CVE-2025-45011.htmlWed, 17 Jun 2026 09:25:20 +0000MEDIUM 5.3: A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter.https://patchthecve.com/cve/CVE-2025-45010.htmlhttps://patchthecve.com/cve/CVE-2025-45010.htmlWed, 17 Jun 2026 09:25:20 +0000MEDIUM 5.3: A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters.https://patchthecve.com/cve/CVE-2025-45009.htmlhttps://patchthecve.com/cve/CVE-2025-45009.htmlWed, 17 Jun 2026 09:25:20 +0000MEDIUM 5.3: A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter.https://patchthecve.com/cve/CVE-2025-45020.htmlhttps://patchthecve.com/cve/CVE-2025-45020.htmlWed, 17 Jun 2026 09:25:21 +0000HIGH 7.2: A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request.https://patchthecve.com/cve/CVE-2024-54811.htmlhttps://patchthecve.com/cve/CVE-2024-54811.htmlWed, 17 Jun 2026 08:10:43 +0000CRITICAL 9.8: A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter.