CVE-2025-40690

Publication date

2025-09-11 11:23:32

Family

INCIBE

State

PUBLISHED

Description

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via teamid parameter in the endpoint /ofrs/admin/edit-team.php.