Security Advisory
CVE-2025-40691
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via todate parameter in the endpoint /ofrs/admin/bwdates-report-result.php.