PT-2025-37177

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The application suffers from a stored cross-site scripting issue due to insufficient validation of user-supplied data. Specifically, the tname parameter via GET, and the teamleadname,...

CVE-2025-40689: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-40693: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

CVE-2025-40687: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...

Online Fire Reporting System ofrs/admin/index.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of external input SQL statements in ofrs/admin/index.php. The vulnerability can be exploited by an attacker to...

CVE-2024-34987: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process...

PT-2022-21015

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=teams/view team&id=" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or...

PT-2022-21017

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ofrs/admin/requests/take action.php" API endpoint, specifically through the id variable. Recommendations For Online Fire...

PT-2022-3400

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue is related to a lack of protection against SQL query structure exploitation. An attacker can execute arbitrary SQL queries via the "/ofrs/admin/?page=requests/manage request&id=" A...

PT-2022-21016

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=requests/view request&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized...

PT-2022-21010

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized data...

CVE-2022-31983: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/managerequest&id=...

CVE-2022-31984: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=...

CVE-2022-31974: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=...

CVE-2022-31975: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=...

CVE-2022-31981: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...

CVE-2022-31982: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

PT-2022-21009

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/admin/?page=reports&date=" API endpoint, specifically through the date variable. Recommendations For Onli...

CVE-2022-31980: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...