Home
Description
A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters.
References
github.com/...rmal-bwdates-reports-details-html-injection.md
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.