CNNVD-202509-1668 Information

CNNVD ID

CNNVD-202509-1668

CVE-2025-40690

  • CNNVD Published: 2025-09-11

Description (Chinese)

Online Fire Reporting System是Carlo Montero个人开发者的一个在线火灾报告系统。 Online Fire Reporting System 1.2版本存在SQL注入漏洞,该漏洞源于对端点/ofrs/admin/edit-team.php中参数teamid的错误操作,可能导致SQL注入攻击。

Description (English)

Online Fire Reporting Systems is an online fire reporting system for Carlo Montero’s personal developers. Online Fire Reporting System 1.2 has an injection loophole in SQL, which stems from the error of the parameter teamid in peer/ofs/admin/edit-team.php, which may lead to an SQL injection attack.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

个人开发者

Published

2025-09-11

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-phpgurukuls-online-fire-reporting-system

Share on: