CVE-2025-56075: SQL Injection

Published Sep 22, 2025

Updated

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.

Affected Software

2 affected components

Phpgurukul Park Ticketing Management System

Phpgurukul Park Ticketing Management System=2.0

Event History

Sep 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-56075?

CVE-2025-56075 has a high severity due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-56075?

To fix CVE-2025-56075, sanitize and validate the 'fromdate' parameter in the PHPGurukul Park Ticketing Management System.

What software is affected by CVE-2025-56075?

CVE-2025-56075 affects PHPGurukul Park Ticketing Management System version 2.0.

Can CVE-2025-56075 lead to data loss?

Yes, CVE-2025-56075 can lead to data loss as it allows attackers to execute arbitrary SQL code.

Is CVE-2025-56075 easy to exploit?

CVE-2025-56075 is considered easy to exploit given the simplicity of crafting a malicious POST request.