CVE-2025-40689

CVE-2025-40689 affects Online Fire Reporting System v1.2 (PHPGurukul). The vulnerability is a SQL Injection in the /ofrs/admin/request-details.php endpoint, exploitable via the remark, status, and requestid parameters, enabling an attacker to retrieve, create, update, and delete records in the ba...

CVE-2025-40689 SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-40689: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

PT-2025-37171

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System is susceptible to SQL Injection attacks. An attacker can potentially retrieve, create, update, and delete database information through the remark, status,...

CVE-2025-40692: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'requestid' parameter in the endpoint '/ofrs/details.php'...

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Fire Reporting System version 1.2, which stems from incorrect manipulation of the parameter requestid in the endpoint /ofrs/details.php, which could...

PT-2025-37176

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a SQL injection flaw. This flaw allows an attacker to retrieve, create, update, and delete database information via the requestid parameter in the...

CVE-2025-52924: Improper Neutralization of Special Elements used in an SQL Command

In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header...

CVE-2025-52924

In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header...

Online Fire Reporting System /details.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /details.php. An attacker can exploi...

Online Fire Reporting System /request-details.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...

PHPGurukul Online Fire Reporting System Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /details.php. An attacker can exploi...

CVE-2025-5615: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /details.php. The manipulation of the argument requestid leads to sql injection. The attack can be launched remotely...

PT-2025-23863 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue affects the processing of the file "/request-details.php". The manipulation of the requestid argument leads to SQL injection. The attack can be initiated...

PHPGurukul Online Fire Reporting System Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...

CVE-2025-5613: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /request-details.php. The manipulation of the argument requestid leads to sql injection. The attack may be initiated remotely. The exploit ha...

Function fulfillRandomWords in VRFNFTRandomDraw contract must not revert

Lines of code Vulnerability details The VRFNFTRandomDraw contract implements the Chainlink VFR feature to pull random data to select the raffle winner. As per their security guidelines the implementation of the fulfillRandomWords function must not revert. Impact If the fulfillRandomWords function...

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

CVE-2014-8487: Exposure of Sensitive Information to an Unauthorized Actor

Kony Management aka Enterprise Mobile Management or EMM 1.2 and earlier allows remote authenticated users to read 1 arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or 2 requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm...

PT-2015-4048

Name of the Vulnerable Software and Affected Versions Kony Management aka Enterprise Mobile Management or EMM versions 1.2 and earlier Description The issue allows remote authenticated users to read arbitrary messages or requests. This can be achieved via the messageId parameter to the...