CVE-2025-13247 | PHPGurukul Tourism Management System 1.0 /admin/user-bookings.php uid sql injection

A vulnerability labeled as critical has been found in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection.

This vulnerability is known as CVE-2025-13247. It is possible to launch the attack remotely. Furthermore, an exploit is available.