CVE-2025-5617: fallo de gravedad media en PHPGurukul Online Fire Reporting System
PHPGurukul Online Fire Reporting System manage-teams.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.5%
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
PHPGurukul · Online Fire Reporting SystemCVEs relacionadas — PHPGurukul Online Fire Reporting System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-3240MEDIUMPHPGurukul Online Fire Reporting System search.php sql injectionEPSS 0.6%CVE-2025-3239MEDIUMPHPGurukul Online Fire Reporting System edit-guard-detail.php sql injectionEPSS 0.6%CVE-2025-3238MEDIUMPHPGurukul Online Fire Reporting System search-request.php sql injectionEPSS 0.6%CVE-2025-5618MEDIUMPHPGurukul Online Fire Reporting System edit-team.php sql injectionEPSS 0.5%CVE-2025-5613MEDIUMPHPGurukul Online Fire Reporting System request-details.php sql injectionEPSS 0.5%CVE-2025-5612MEDIUMPHPGurukul Online Fire Reporting System reporting.php sql injectionEPSS 0.5%