CVE-2025-3240
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-3240 is a critical vulnerability affecting the PHPGurukul Online Fire Reporting System version 1.2. This issue lies in an unidentified functionality of the /admin/search.php file, which is susceptible to SQL injection. Malicious actors can exploit this by manipulating the searchdata argument, allowing them to launch attacks remotely. The vulnerability has been publicly disclosed, increasing the risk for potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.