CVE-2025-40689

published 2025-09-11

CVE-2025-40689: SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via…

critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via

'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	online_fire_reporting_system	—	—

CWE-89