CVE-2025-56075

MediumCVSS 5.4

Published: 22/09/2025(UTC)Updated: 05/11/2026(UTC)Translated: 06/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.

Risk Assessment

An attacker can inject arbitrary SQL queries, potentially leading to data leakage, database modification, or authentication bypass.

Recommendation

Update the application to a patched version or implement parameterized queries and input validation in normal-bwdates-reports-details.php.

Other vulnerabilities in PHPGurukul Park Ticketing Management System

CVE-2025-56074Critical
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS