CVE-2025-40692: SQL injection in PHPGurukul Online Fire Reporting System
SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via
'requestid' parameter in the endpoint '/ofrs/details.php'.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40692?
CVE-2025-40692 has a high severity rating due to its potential to allow unauthorized access to sensitive database operations.
How do I fix CVE-2025-40692?
To fix CVE-2025-40692, ensure that all user inputs to the 'requestid' parameter are properly sanitized and validated to prevent SQL injection.
What versions of Online Fire Reporting System are affected by CVE-2025-40692?
CVE-2025-40692 affects version 1.2 of the PHPGurukul Online Fire Reporting System.
What types of attacks can CVE-2025-40692 facilitate?
CVE-2025-40692 can facilitate various attacks including data retrieval, creation, updating, and deletion of database records.
Is there a public exploit available for CVE-2025-40692?
Details specific to publicly available exploits for CVE-2025-40692 may vary, and it is advisable to monitor cybersecurity forums for updates.