CVE-2025-3238

CVE-2025-3238 affects PHPGurukul Online Fire Reporting System 1.2. an unknown function in /search-request.php is vulnerable to SQL injection via the searchdata parameter. The issue can be triggered remotely, and an exploit has been disclosed publicly. Multiple sources reiterate the same root caus...

CVE-2025-5612

Summary of CVE-2025-5612 (PHPGurukul Online Fire Reporting System 1.2) Affected software: PHPGurukul Online Fire Reporting System, version 1.2. Vulnerable component: /reporting.php, caused by unsafely handling the fullname parameter which enables SQL injection. Root cause: lack of validation/inpu...

CVE-2025-3240

CVE-2025-3240 affects PHPGurukul Online Fire Reporting System v1.2. The vulnerability resides in the /admin/search.php functionality, where manipulation of the searchdata parameter leads to SQL injection. Exploitation can be conducted remotely and, per multiple reports, the exploit has been discl...

CVE-2023-36941

The CVE-2023-36941 entry describes a cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2. The affected component is the PHPGurukul web application, with the vulnerability located in input handling for the fields team name, leader, and member...

CVE-2025-5616

The CVE-2025-5616 issue affects PHPGurukul Online Fire Reporting System 1.2, specifically the file /admin/profile.php. The root cause is a SQL injection in the mobilenumber parameter, which can be exploited remotely and may allow attackers to access or exfiltrate database data. Several connected ...

CVE-2025-40693

CVE-2025-40693 : Stored Cross-Site Scripting in Online Fire Reporting System v1.2 (PHPGurukul) arises from insufficient validation of inputs: GET parameter tname and POST parameters teamleadname, teammember, and teamname at /ofrs/admin/edit-team.php. This authenticated XSS can enable an attacker ...

CVE-2025-5614

CVE-2025-5614 affects PHPGurukul Online Fire Reporting System 1.2. The vulnerability is a SQL injection in the file /search-report-result.php, triggered by manipulating the serachdata parameter. Exploitation is described as possible remotely and the vulnerability has been publicly disclosed. Seve...

CVE-2025-5615

PHPGurukul Online Fire Reporting System 1.2 is affected by a SQL injection in /details.php via the unvalidated requestid parameter. The vulnerability allows remote exploitation and has been publicly disclosed. The impact is described as high (confidentiality, integrity, availability). The connect...

CVE-2025-5617

The CVE-2025-5617 entry concerns PHPGurukul Online Fire Reporting System 1.2. The vulnerability is an SQL injection in the /admin/manage-teams.php file, triggered by manipulating the teamid parameter. It is stated that the attack can be initiated remotely and that exploits have been disclosed pub...

CVE-2025-5613

CVE-2025-5613 corresponds to a SQL injection in PHPGurukul Online Fire Reporting System 1.2, triggered by manipulating the requestid parameter in /request-details.php. Multiple connected sources (CNVD/CNNVD/Red Hat/CVELIST entries, PT security advisory) confirm remote exploitation potential and p...

CVE-2025-5618

CVE-2025-5618 concerns PHPGurukul Online Fire Reporting System 1.2. Multiple connected sources confirm a SQL injection vulnerability in the /admin/edit-team.php script, triggered by manipulating the teamid parameter. Root cause: lack of input validation leading to SQL command manipulation. Impact...

CVE-2023-36942

PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 is affected by a cross-site scripting (XSS) vulnerability in the website title field. The underlying issue is unsanitized input in the title being reflected, enabling an attacker to inject arbitrary web scripts or HTML. Repor...

CVE-2025-3239

PHPGurukul Online Fire Reporting System 1.2 is affected by a SQL injection in /admin/edit-guard-detail.php triggered by manipulating the editid parameter. The vulnerability arises from unsafely handling external input, enabling remote attackers to execute arbitrary SQL commands and potentially ac...

CVE-2024-34987

CVE-2024-34987 is a SQL Injection vulnerability in PHPGurukul Online Fire Reporting System 1.2, affecting the ofrs/admin/index.php login flow. The issue allows bypassing authentication by injecting SQL into the username field, potentially exposing database data. Affected component: PHPGurukul Onl...

CVE-2025-7561

PHPGurukul Online Fire Reporting System 1.2 contains a SQL injection vulnerability in /admin/team-ontheway-requests.php caused by unsafely handling the teamid parameter. The issue can be triggered remotely and has public exploit information. Multiple sources confirm the vulnerability and its impa...

CVE-2023-36940

CVE-2023-36940 is an XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v1.2. The issue arises from handling user input in the search field, allowing a crafted payload to be injected and potentially execute arbitrary code. Affected software is PHPGurukul Online Fire ...

CVE-2025-7563

CVE-2025-7563 affects PHPGurukul Online Fire Reporting System 1.2. The vulnerability resides in an unknown functionality of the file /admin/completed-requests.php, where manipulating the parameter teamid leads to a SQL injection. It can be exploited remotely, and the exploit has been publicly dis...

CVE-2025-7584

CVE-2025-7584 affects PHPGurukul Online Fire Reporting System 1.2. The vulnerability is a SQL injection in /admin/add-team.php via the teammember parameter, allowing remote exploitation and potentially exposing or altering database data. Public disclosure exists and exploitation may be possible. ...

CVE-2025-40692

CVE-2025-40692 relates to the Online Fire Reporting System (OFRS) v1.2 by PHPGurukul. The vulnerability is a SQL injection in the /ofrs/details.php endpoint, exploitable via the requestid parameter, allowing an attacker to retrieve, create, update, and delete data in the underlying database. Root...

CVE-2025-7585

CVE-2025-7585 affects PHPGurukul Online Fire Reporting System v1.2, specifically the vulnerable code path in the file , where manipulation of the parameter webtitle enables an SQL injection. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple connected sources conf...

CVE-2025-7560

CVE-2025-7560 affects PHPGurukul Online Fire Reporting System 1.2. The vulnerability is a SQL injection in the file /admin/workin-progress-requests.php, caused by unsafely handling the teamid parameter. It is exploitable remotely and is described as critical. Recommendations from the sources: upg...

CVE-2025-7583

The CVE-2025-7583 entry concerns PHPGurukul Online Fire Reporting System 1.2. The vulnerability is in /admin/all-requests.php where manipulation of the teamid parameter enables SQL injection, with remote exploitation and a disclosed exploit. Multiple sources corroborate the existence of a SQL inj...

CVE-2025-40689

CVE-2025-40689 affects Online Fire Reporting System v1.2 (PHPGurukul). The vulnerability is a SQL Injection in the /ofrs/admin/request-details.php endpoint, exploitable via the remark, status, and requestid parameters, enabling an attacker to retrieve, create, update, and delete records in the ba...

CVE-2025-40696

CVE-2025-40696 affects Online Fire Reporting System v1.2 (PHPGurukul). The vulnerability is a stored authenticated XSS in /ofrs/reporting.php caused by insufficient validation of POST parameters fullname, location, and message. This could allow an authenticated attacker to craft input that steals...

CVE-2025-40687

CVE-2025-40687 affects Online Fire Reporting System v1.2 (PHPGurukul). The root cause is an SQL injection flaw in the /ofrs/admin/add-team.php endpoint, exploitable via the mobilenumber, teamleadname, and teammember parameters. This can allow an attacker to retrieve, create, update, and delete da...

CVE-2025-40695

The CVE-2025-40695 affects the Online Fire Reporting System (OFRS) v1.2. A stored XSS exists in the /ofrs/admin/request-details.php endpoint due to insufficient validation of POST parameters remark, status, and takeaction. This authenticated vulnerability could allow a remote attacker to inject s...

CVE-2025-7562

PHPGurukul Online Fire Reporting System 1.2 contains a SQL injection in the teamid parameter of /admin/new-requests.php. The vulnerability is exploitable remotely and has been publicly disclosed. Affected component is the /admin/new-requests.php file; root cause is lack of input validation for te...

CVE-2025-7582

CVE-2025-7582 concerns PHPGurukul Online Fire Reporting System 1.2, with a SQL injection in the file /admin/assigned-requests.php. The vulnerability is triggered by manipulating the teamid parameter, enabling remote exploitation. Multiple connected records corroborate the issue as SQL injection o...

CVE-2025-40691

CVE-2025-40691 involves a SQL injection in PHPGurukul’s Online Fire Reporting System v1.2. The vulnerability is triggered via the todate parameter in /ofrs/admin/bwdates-report-result.php, enabling an attacker to retrieve, create, update, and delete data. Multiple sources (NVD/Red Hat/CVE lists) ...

CVE-2025-7559

PHPGurukul Online Fire Reporting System 1.2 is affected by a SQL injection in /admin/bwdates-report-result.php via manipulated fromdate/todate parameters. This vulnerability allows remote exploitation and has publicly disclosed exploits. The issue is caused by unsafely interpolating user input in...

CVE-2025-40694

CVE-2025-40694 affects Online Fire Reporting System v1.2 by PHPGurukul. The issue is a stored authenticated XSS caused by insufficient validation of the POST parameters fromdate and todate in /ofrs/admin/bwdates-report-result.php. The vulnerability could allow an attacker to craft a query that, w...

CVE-2025-40690

CVE-2025-40690 corresponds to a SQL injection in the Online Fire Reporting System v1.2 (PHPGurukul) where the vulnerability exists in the teamid parameter of the /ofrs/admin/edit-team.php endpoint. The root cause is unsanitized input leading to arbitrary database access, enabling an attacker to r...