CVE-2025-40689: SQL injection in PHPGurukul Online Fire Reporting System
SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via
'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40689?
CVE-2025-40689 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-40689?
To fix CVE-2025-40689, sanitize and validate all user inputs on the '/ofrs/admin/request-details.php' endpoint.
What are the potential impacts of CVE-2025-40689?
CVE-2025-40689 could allow an attacker to execute unauthorized SQL commands, leading to data manipulation or exposure.
Which software is affected by CVE-2025-40689?
CVE-2025-40689 affects version 1.2 of the PHPGurukul Online Fire Reporting System.
How does CVE-2025-40689 allow database manipulation?
CVE-2025-40689 allows database manipulation through unvalidated input parameters such as 'remark', 'status', and 'requestid'.