CVE-2025-56074: SQL Injection
Published Sep 22, 2025
·Updated
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
Affected Software
2 affected components
Phpgurukul Park Ticketing Management System
Phpgurukul Park Ticketing Management System=2.0
Event History
Sep 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-56074?
CVE-2025-56074 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2025-56074?
To fix CVE-2025-56074, sanitize user inputs in the foreigner-bwdates-reports-details.php file to prevent SQL injection.
3
Who is affected by CVE-2025-56074?
CVE-2025-56074 affects users of PHPGurukul Park Ticketing Management System version 2.0.
4
What is the exploit method for CVE-2025-56074?
The exploit method for CVE-2025-56074 involves executing arbitrary SQL code via the fromdate parameter in a POST request.
5
Can CVE-2025-56074 be exploited remotely?
Yes, CVE-2025-56074 can be exploited remotely by unauthorized attackers.