Lucene search
+L

491 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•6 views

CVE-2025-5617: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS6.4AI score0.00484EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:49 a.m.•20 views

CVE-2024-34987

A SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process...

9.1CVSS9.8AI score0.00607EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:39 a.m.•20 views

CVE-2024-1821

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...

8.8CVSS8.9AI score0.00537EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:03 a.m.•18 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS5.8AI score0.00578EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:03 a.m.•17 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.4AI score0.00537EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:16 a.m.•13 views

CVE-2022-29597

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

6.5CVSS6.9AI score0.01927EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:58 a.m.•18 views

CVE-2022-31415

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...

6.5CVSS8.3AI score0.00937EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:42 p.m.•16 views

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

5.4CVSS5.8AI score0.00522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:55 p.m.•15 views

CVE-2022-31975

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser=...

7.2CVSS8.1AI score0.04906EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:55 p.m.•18 views

CVE-2022-31976

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest...

9.8CVSS8.1AI score0.07224EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:46 p.m.•20 views

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

6.1CVSS5.8AI score0.00809EPSS
SaveExploits2References1
CNVD
CNVD
•added 2025/04/09 12:00 a.m.•19 views

Online Fire Reporting System search.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacker can us...

9.8CVSS8.2AI score0.00562EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/06 11:29 a.m.•32 views

CVE-2025-3239

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/04 11:15 a.m.•17 views

CVE-2025-3239

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References5
OSV
OSV
•added 2025/04/04 11:15 a.m.•14 views

CVE-2025-3240

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/04 10:31 a.m.•17 views

CVE-2025-3240 PHPGurukul Online Fire Reporting System search.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

7.5CVSS7.6AI score0.00562EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/04 10:31 a.m.•28 views

CVE-2025-3240 PHPGurukul Online Fire Reporting System search.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

7.5CVSS0.00562EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/04 10:31 a.m.•88 views

CVE-2025-3240

CVE-2025-3240 affects PHPGurukul Online Fire Reporting System v1.2. The vulnerability resides in the /admin/search.php functionality, where manipulation of the searchdata parameter leads to SQL injection. Exploitation can be conducted remotely and, per multiple reports, the exploit has been discl...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/04 10:31 a.m.•39 views

CVE-2025-3239 PHPGurukul Online Fire Reporting System edit-guard-detail.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely...

7.5CVSS7.7AI score0.00562EPSS
SaveExploits1References5
OSV
OSV
•added 2025/04/04 10:15 a.m.•21 views

CVE-2025-3238

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References5
Rows per page
Query Builder