CVE-2025-45019

Summary

CVE-2025-45019 is a SQL injection vulnerability affecting the /add-foreigners-ticket.php file in PHPGurukul Park Ticketing Management System version 2.0. This issue allows remote attackers to inject malicious SQL code into the application through the cprice POST request parameter, potentially granting them unauthorized access or the ability to execute arbitrary code. Attackers could exploit this vulnerability to steal sensitive data, manipulate ticket records, or even gain control of the underlying server. System administrators are urged to apply the available patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.