VulnSocial

CVE-2025-40690(phpgurukul / online_fire_reporting_system)

LOWCVSS 9.8 · CRITICAL

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'.

phpgurukul CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • online_fire_reporting_system

Affected systems

Vendors
phpgurukul
Products
online_fire_reporting_system

1 version affected across 1 product

Deep dive

Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 CRITICAL: CVE-2025-40690 (CVSS 9.8) - SQL Injection in PHPGurukul Online Fire Reporting System v1.2. Unauthenticated remote attackers can read/modify/delete database via 'teamid' parameter. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/zvLXxBJkAI

    0000017
    150 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appphpgurukulonline_fire_reporting_system1.2--

Explore more

Back to dashboardphpgurukul CVEsonline_fire_reporting_system vulnerabilities