ZeroHour

CVE-2025-45011

PoC
CVSS 3.1
5.3 medium
EPSS
<1%p27
Published
()
Modified
Description

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter.

Vendors
phpgurukul
Products
park ticketing management system
Weakness
CWE-77
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

In the news

No ingested article mentions this CVE yet.