Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.