Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3028▼ 62 respecto a la semana anterior
Críticas / altas1422▲ 60 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
20 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.4) | 0.26% | — | Phpgurukul Park Ticketing Management System | 22/9/2025 | 17/6/2026 | A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request. | |
| Analizada | Crítica (9.8) | 0.48% | — | Phpgurukul Park Ticketing Management System | 22/9/2025 | 17/6/2026 | A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request. | |
| Analizada | Media (5.3) | 0.61% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be initiated remotely. The… | |
| Analizada | Media (5.3) | 0.61% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of the file /forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.40% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.43% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.43% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.43% | — | Phpgurukul Park Ticketing Management System | 16/5/2025 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. The exploit has… | |
| Analizada | Media (6.9) | 0.56% | — | Phpgurukul Park Ticketing Management System | 1/5/2025 | 17/6/2026 | A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The exploit has been… | |
| Analizada | Media (5.4) | 0.47% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter. | |
| Analizada | Crítica (9.8) | 0.58% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter. | |
| Analizada | Crítica (9.8) | 0.81% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter. | |
| Analizada | Media (6.1) | 0.33% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters. | |
| Analizada | Media (5.3) | 0.34% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter. | |
| Analizada | Media (5.3) | 0.34% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters. | |
| Analizada | Media (5.3) | 0.34% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter. | |
| Analizada | Alta (7.2) | 0.56% | — | Phpgurukul Park Ticketing Management System | 30/4/2025 | 17/6/2026 | A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request. | |
| Analizada | Crítica (9.8) | 0.63% | — | Phpgurukul Park Ticketing Management System | 12/12/2024 | 17/6/2026 | A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter. | |
| Modificada | Crítica (9.8) | 0.83% | — | Phpgurukul Park Ticketing Management System | 27/3/2023 | 17/6/2026 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. | |
| Modificada | Media (4.8) | 0.46% | — | Phpgurukul Park Ticketing Management System | 27/3/2023 | 17/6/2026 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter. |