CVE-2022-31415: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...

PT-2022-20736

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the GET parameter in the "/report/list.php" API endpoint. The GET parameter in this endpoint is...