Description
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| PHPGurukul | Online Fire Reporting System | 1.2 |
References
- https://github.com/f1rstb100d/myCVE/issues/128Exploit, Issue Tracking, Third Party Advisory
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.316260Permissions Required, VDB Entry
- https://vuldb.com/?id.316260Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.615035Third Party Advisory, VDB Entry
- https://github.com/f1rstb100d/myCVE/issues/128Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Jul 14, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed