Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55744)

Online Fire Reporting System is an online fire reporting system from Carlo Montero’s personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/requests/take_ action.php?id=Lack of validation of external input SQL statements. action.php?id=Lack of validation of external input SQL statements, an attacker can use this vulnerability to execute illegal SQL commands to steal sensitive data from the database.