Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2024-34987

A SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.

  • Published: Jun 3, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-34987
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.1
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
phpgurukul / online_fire_reporting_system 1.2 1.2.x