CVE-2025-40689

Publication date

2025-09-11 11:21:04

Family

INCIBE

State

PUBLISHED

Description

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  remark, status and requestid parameters in the endpoint /ofrs/admin/request-details.php.