Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2025-40687

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 

'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'.

  • Published: Sep 11, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-40687
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
phpgurukul / online_fire_reporting_system 1.2 1.2.x