5 matches found
CVE-2022-31981
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam=...
CVE-2022-31981
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...
CVE-2022-31981
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...
CVE-2022-31981
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...
CVE-2022-31981
Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin page parameter id (/ofrs/admin/?page=teams/view_team&id=). The Red Hat advisory also notes the same vector. Root cause identified as unsafe SQL construction leading to data exposure/manipulation; CVSS 3.1 ...