CVE-2025-7585 MEDIUM

CVE-2025-7585: PHPGurukul Online Fire Reporting System manage-site.php sql injection

Vendor Phpgurukul
Product Online Fire Reporting System
Weakness CWE-89 · SQLi
Published July 14, 2025
Last update July 14, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /admin/manage-site.php. The manipulation of the argument webtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

July 14, 2025 CVE published
July 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection CVE-2025-3697 SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection CVE-2025-62179 WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php` CVE-2022-4259 Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 CVE-2019-25730 Listing Hub CMS 1.0 SQL Injection via pages.php id