Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55746)

2022-06-0900:00:00

China National Vulnerability Database

www.cnvd.org.cn

online fire reporting system

sql injection

vulnerability

carlo montero

version v1.0

delete_request

validation

external input

attackers

sensitive database data

EPSS

0.016

Percentile

87.5%

JSON

Online Fire Reporting System is an online fire reporting system from Carlo Montero’s personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= delete_request lacks validation for external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.

EPSS

0.016

Percentile

87.5%

JSON

Related for CNVD-2022-55746