491 matches found
CVE-2022-34611
A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...
CVE-2022-34611: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...
PT-2022-22243 · Unknown · Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.0 Description: A cross-site scripting XSS issue in the /index.php/?p=report endpoint of the Online Fire Reporting System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-31879
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...
CVE-2022-31879
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...
CVE-2022-31879
CVE-2022-31879 affects Online Fire Reporting System v1.0, with a confirmed SQL injection via the date parameter. Affects the application logic where user input is used in SQL queries, enabling potentially arbitrary queries and unauthorized data access or manipulation as described in multiple sour...
Online Fire Reporting System SQL注入漏洞
Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in version 1.0 of the Online Fire Reporting System due to a security issue with the date parameter in the node app, which can be exploited by an attacker...
CVE-2022-31879: Improper Neutralization of Special Elements used in an SQL Command
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...
The vulnerability of the network software tool, Online Fire Reporting System, is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.
The vulnerability of the network software system, Online Fire Reporting System, is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the...
Online Fire Reporting System跨站脚本漏洞
Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. Online Fire Reporting System v1.0 is vulnerable to a cross-site scripting vulnerability that originates in /ofrs/classes/Master.php due to a lack of data validation of user-supplied The...
Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55737)
Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which stems from a GET parameter in /report/list.php that lacks validation for external The vulnerability is caused...
CVE-2022-31906
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
Cross site scripting
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
CVE-2022-31906
CVE-2022-31906 affects the Online Fire Reporting System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the /ofrs/classes/Master.php path caused by lack of proper input validation and output encoding. This can enable attackers to run JavaScript in the victim’s browser, as describe...
CVE-2022-31906
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
CVE-2022-31906: Improper Neutralization of Input During Web Page Generation
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
PT-2022-20981
Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/ofrs/classes/Master.php". Recommendations For Online Fire Reporting System version 1.0...
CVE-2022-31415
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php...