A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters.
CVSS
No CVSS.
References
Configurations
History
09 May 2025, 13:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Park-Ticketing-Management-System-Project/XSS/foreigner-bwdates-reports-details-XSS-injection.md - Exploit, Third Party Advisory | |
| First Time |
Phpgurukul park Ticketing Management System
Phpgurukul |
|
| CPE | cpe:2.3:a:phpgurukul:park_ticketing_management_system:2.0:*:*:*:*:*:*:* |
30 Apr 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-30 14:15
Updated : 2025-05-09 13:44
NVD link : CVE-2025-45015
Mitre link : CVE-2025-45015
JSON object : View
Products Affected
phpgurukul
- park_ticketing_management_system
CWE
No CWE.