CVE-2025-13247

Publication date

2025-11-16 10:32:07

Family

VulDB

State

PUBLISHED

Description

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.