CVE-2022-31906

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...

Cross site scripting

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...

CVE-2022-31906

CVE-2022-31906 affects the Online Fire Reporting System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the /ofrs/classes/Master.php path caused by lack of proper input validation and output encoding. This can enable attackers to run JavaScript in the victim’s browser, as describe...

CVE-2022-31906

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...

CVE-2022-31415

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...

CVE-2022-31415

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...

Sql injection

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...

CVE-2022-31415

Online Fire Reporting System v1.0 is affected by CVE-2022-31415: a SQL injection vulnerability via a GET parameter in /report/list.php. The underlying issue is unsanitized/unsafe SQL statements constructed from external input, enabling an attacker to alter queries and potentially access or exfilt...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteteam lacks validation of external input SQL statements, whi...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55738)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=reports& date=Lack of validation of external input SQL statements, an...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55742)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/view team&id=Lack of validation of external input SQL statements, an...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55741)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/ manageteam...

Online Fire Reporting System Arbitrary File Deletion Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. v1.0 of Online Fire Reporting System is vulnerable to an arbitrary file deletion vulnerability, which originates in /ofrs/classes/Master.php?f= deleteimg lacks valid validation for filenames,...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55744)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/requests/take action.php?id=Lack of validation of external input SQL statements...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55743)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=user/manage user&id=Lack of validation of external input SQL statements, an...

Solutions Atlantic Regulatory Reporting System Cross-Site Scripting Vulnerability

Solutions Atlantic Regulatory Reporting System is a flagship regulatory reporting system from Solutions Atlantic, Inc. Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to a cross-site scripting vulnerability that could be exploited to execute JavaScript code...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55740)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=requests/ viewrequest&id=Lack of validation of external input SQL statement...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55745)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteinquiry lacks validation for external input SQL statements,...

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55746)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleterequest lacks validation for external input SQL statements,...

CVE-2022-29597

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...