Is phpgurukul/online_fire_reporting_system safe ? phpgurukul/online_fire_reporting_system (packagist) has 18 known vulnerabilities, the worst rated CRITICAL. No malicious-package signal is recorded.
// reach 0 direct dependencies
none carry a known advisory
0 packages depend on it
dependents not yet indexed for this ecosystem
// ai model usage Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.
cvss CVSS v4.0 base score out of 10
epss chance of exploitation in 30 days, 27th percentile of all CVEs
xyz score CyberXYZ composite out of 10
fig. 01 — CVE-2025-40687, the advisory selected below
// 18 advisories CVE CVE-2025-40687 SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. CRIT CVE CVE-2025-40689 SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. CRIT CVE CVE-2025-40690 SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. CRIT CVE CVE-2025-40691 SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. CRIT CVE CVE-2025-40692 SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. CRIT CVE CVE-2025-40693 Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of… MEDI CVE CVE-2025-40694 Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper… MEDI CVE CVE-2025-40695 Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper… MEDI CVE CVE-2025-40696 Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper… MEDI CVE CVE-2025-7559 A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. MEDI Show all 18 advisories SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.
Full advisory text at NVD .
// cvss v4.0 vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Attack vector Network
Attack complexity Low
Attack requirements None
Privileges required None
User interaction None
Confidentiality (vulnerable system) High
Integrity (vulnerable system) High
Availability (vulnerable system) High
Confidentiality (subsequent systems) None
Integrity (subsequent systems) None
Availability (subsequent systems) None // questions Is phpgurukul/online_fire_reporting_system safe to install? CyberXYZ does not call a package safe in absolute terms. It records 18 known vulnerabilities for phpgurukul/online_fire_reporting_system (packagist), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does phpgurukul/online_fire_reporting_system have known vulnerabilities? Yes. CyberXYZ records 18 known vulnerabilities for phpgurukul/online_fire_reporting_system (packagist), the worst rated CRITICAL. These include CVE-2025-40687, CVE-2025-40689, CVE-2025-40690, CVE-2025-40691, CVE-2025-40692.
How do I check phpgurukul/online_fire_reporting_system before installing? Search phpgurukul/online_fire_reporting_system in CyberXYZ Check at https://cyberxyz.io/check?q=phpgurukul%2Fonline_fire_reporting_system . The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 13:07 UTC. The most recent advisory here was published 2025-09-11. Updated continuously from NVD, GHSA, OSV and CNA feeds.
Think a verdict here is wrong? Tell us — we respond within 2 business days. Report an issue with this page