CVE-2025-40691: Critical SQL Injection in PHPGurukul Fire Reporting
Critical SQL injection in PHPGurukul Online Fire Reporting System 1.2 (date report page). INCIBE reports no fix, so patch the code or restrict access.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Critical SQL injection in PHPGurukul Online Fire Reporting System 1.2 (date report page). INCIBE reports no fix, so patch the code or restrict access.
Critical SQL injection in PHPGurukul Online Fire Reporting System 1.2 (edit-team.php). INCIBE reports no fix, so patch the query or restrict access.
Critical SQL injection in PHPGurukul Online Fire Reporting System 1.2 (request-details.php). INCIBE reports no fix, so patch the code or restrict access.
Critical SQL injection in PHPGurukul Online Fire Reporting System 1.2 (add-team.php). INCIBE reports no fix, so patch the query or restrict access.
Critical SQL injection in Human Resource Management System 1.0 (ccity.php). INCIBE reports no fix, so patch the query, restrict access or retire the app.
High risk time-based blind SQL injection in TCMAN GIM v11 (frmPreventivosList). INCIBE says the 20241112 release fixes it. Check your build and upgrade.
High risk time-based blind SQL injection in TCMAN GIM v11 (frmCorrectivosList). INCIBE says the 20241112 release fixes it. Check your build and upgrade.
Critical missing authentication in TCMAN GIM v11 lets anyone reach user management calls. INCIBE says the 20241112 release fixes it. Verify and upgrade.
High severity access control flaw in the admin addpackage page of Online-Travling-System 1.0. No fix is named, so restrict the admin area or retire it.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.