CVE-2022-31981

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin page parameter id (/ofrs/admin/?page=teams/view_team&id=). The Red Hat advisory also notes the same vector. Root cause identified as unsafe SQL construction leading to data exposure/manipulation; CVSS 3.1 ...

CVE-2022-31982

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

CVE-2022-31982

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin interface parameter id (path: /ofrs/admin/?page=requests/view_request&id=). The issue is caused by insufficient input validation/exploitation of untrusted input, enabling arbitrary SQL queries and partial/...

CVE-2022-31983

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/managerequest&id=...

CVE-2022-31983

CVE-2022-31983 affects Online Fire Reporting System v1.0. The vulnerability is a SQL Injection via the parameter /ofrs/admin/?page=requests/manage_request&id=. The root cause described across sources is lack of validation/sanitization of user input used in SQL queries. Impact stated in sources in...

CVE-2022-31984

The Online Fire Reporting System v1.0 is vulnerable to a SQL Injection flaw located at the /ofrs/admin/requests/take_action.php?id= endpoint. The root cause is a lack of validation of external input in the SQL statements, which allows an attacker to execute illegal SQL commands. Successful exploi...

PT-2022-21009

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/admin/?page=reports&date=" API endpoint, specifically through the date variable. Recommendations For Onli...

CVE-2022-31982: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

PT-2022-21013

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ofrs/classes/Master.php?f=delete inquiry" API endpoint. Recommendations For Online Fire Reporting System versi...

CVE-2022-31981: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...

CVE-2022-31980: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...

CVE-2022-31976: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest...

CVE-2022-31977: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam...

PT-2022-3400

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue is related to a lack of protection against SQL query structure exploitation. An attacker can execute arbitrary SQL queries via the "/ofrs/admin/?page=requests/manage request&id=" A...

PT-2022-21012

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the /ofrs/classes/Master.php?f=delete team API endpoint, specifically through the f parameter. This could potentially lead to unauthorized data access ...

PT-2022-21017

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ofrs/admin/requests/take action.php" API endpoint, specifically through the id variable. Recommendations For Online Fire...

PT-2022-21011

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the API endpoint "/ofrs/classes/Master.php?f=delete request". Recommendations For Online Fire Reporting System versi...

CVE-2022-31983: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/managerequest&id=...

CVE-2022-31973: Undefined Security Weakness

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=deleteimg...

PT-2022-21010

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized data...