CVE-2025-45018

Summary

CVE-2025-45018 is a SQL Injection vulnerability affecting the PHPGurukul Park Ticketing Management System version 2.0. The issue lies in the foreigner-bwdates-reports-details.php file where the todate parameter is not properly sanitized. This flaw allows remote attackers to inject malicious SQL code, potentially gaining unauthorized access to sensitive data or even taking control of the affected system. This can lead to data theft, manipulation, or complete system compromise. It is recommended that users upgrade to the latest version of the software or apply the appropriate patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.