CVE-2025-40687 in Online Fire Reporting System정보

요약

\~에 의해 MITRE • 2025. 09. 11.

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via

'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

INCIBE

예약하다

2025. 04. 16.

공개

2025. 09. 11.

모더레이션

수락

항목

VDB-323621

CPE

준비됨

CWE

CWE-89 (확인됨)

CVSS

9.8 (NVD)

EPSS

0.00312

KEV

아니요

활동

매우 낮음

부문

Finance, Industry, ...

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-40687
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-40687
CVE Details	https://www.cvedetails.com/cve/CVE-2025-40687/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!