CVE-2025-7560: PHPGurukul Online Fire Reporting System workin-progress-requests.php sql injection
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file /admin/workin-progress-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7560?
CVE-2025-7560 is classified as a critical vulnerability.
How does CVE-2025-7560 exploit the system?
CVE-2025-7560 exploits the system via SQL injection through the teamid parameter in /admin/workin-progress-requests.php.
Which software is affected by CVE-2025-7560?
CVE-2025-7560 affects PHPGurukul Online Fire Reporting System version 1.2.
How can I fix CVE-2025-7560?
To fix CVE-2025-7560, validate and sanitize inputs for all user-submitted data, particularly the teamid parameter.
What are the potential impacts of CVE-2025-7560?
The potential impacts of CVE-2025-7560 include unauthorized data access and manipulation due to SQL injection.