A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_System/sqli_admin_edit-team.php_teamid.md | Exploit Third Party Advisory |
https://phpgurukul.com/ | Product |
https://vuldb.com/?ctiid.311104 | Permissions Required |
https://vuldb.com/?id.311104 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.589117 | Third Party Advisory VDB Entry |
https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_System/sqli_admin_edit-team.php_teamid.md | Exploit Third Party Advisory |
Configurations
History
06 Jun 2025, 20:11
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpgurukul:online_fire_reporting_system:1.2:*:*:*:*:*:*:* | |
First Time |
Phpgurukul
Phpgurukul online Fire Reporting System |
|
References | () https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_System/sqli_admin_edit-team.php_teamid.md - Exploit, Third Party Advisory | |
References | () https://phpgurukul.com/ - Product | |
References | () https://vuldb.com/?ctiid.311104 - Permissions Required | |
References | () https://vuldb.com/?id.311104 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?submit.589117 - Third Party Advisory, VDB Entry |
05 Jun 2025, 14:15
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_System/sqli_admin_edit-team.php_teamid.md - | |
Summary |
|
04 Jun 2025, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-04 23:15
Updated : 2025-06-06 20:11
NVD link : CVE-2025-5618
Mitre link : CVE-2025-5618
CVE.ORG link : CVE-2025-5618
JSON object : View
Products Affected
phpgurukul
- online_fire_reporting_system