CVE-2025-7562: PHPGurukul Online Fire Reporting System new-requests.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7562?
CVE-2025-7562 is classified as a critical vulnerability.
How can I fix CVE-2025-7562?
To fix CVE-2025-7562, implement input validation and parameterized queries to mitigate SQL injection risks.
What is the impact of CVE-2025-7562?
CVE-2025-7562 allows for remote SQL injection, which can lead to unauthorized access to the database.
What component is affected by CVE-2025-7562?
CVE-2025-7562 affects the /admin/new-requests.php file in the PHPGurukul Online Fire Reporting System.
Who is vulnerable to CVE-2025-7562?
Any installation of PHPGurukul Online Fire Reporting System version 1.2 is vulnerable to CVE-2025-7562.