Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-40691

SQL injection in PHPGurukul Online Fire Reporting System

Description

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'todate' parameter in the endpoint '/ofrs/admin/bwdates-report-result.php'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHPGurukul Online Fire Reporting System

Default version status: unaffected

  • 1.2affected

References