Lucene search
+L

1073 matches found

CNNVD
CNNVD
•added 2023/07/27 12:00 a.m.•19 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in several fields, including team name. The...

6.1CVSS6.4AI score0.00578EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/07/27 12:00 a.m.•35 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6AI score0.00578EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/27 12:00 a.m.•40 views

CVE-2023-36942

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...

6AI score0.00555EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/27 12:00 a.m.•81 views

CVE-2023-36941

The CVE-2023-36941 entry describes a cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2. The affected component is the PHPGurukul web application, with the vulnerability located in input handling for the fields team name, leader, and member...

6.1CVSS5.8AI score0.00578EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/07/27 12:00 a.m.•66 views

CVE-2023-36942

PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 is affected by a cross-site scripting (XSS) vulnerability in the website title field. The underlying issue is unsanitized input in the title being reflected, enabling an attacker to inject arbitrary web scripts or HTML. Repor...

6.1CVSS5.8AI score0.00555EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/27 12:00 a.m.•4 views

CVE-2023-36942: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...

6.1CVSS6.5AI score0.00555EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/27 12:00 a.m.•3 views

CVE-2023-36941: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS6.5AI score0.00578EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2023/07/12 5:09 p.m.•8 views

fire-forum.de Cross Site Scripting vulnerability OBB-3508920

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/07/10 6:15 p.m.•15 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.1AI score0.00537EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/10 6:15 p.m.•29 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS5.1AI score0.00537EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/07/10 6:15 p.m.•9 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.2AI score0.00537EPSS
SaveExploits1References4
Prion
Prion
•added 2023/07/10 6:15 p.m.•24 views

Cross site scripting

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.3CVSS5.2AI score0.00537EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•20 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System, which can be exploited to execute arbitrary code via the search field...

4.8CVSS5.8AI score0.00537EPSS
SaveExploits1References3
CVE
CVE
•added 2023/07/10 12:00 a.m.•54 views

CVE-2023-36940

CVE-2023-36940 is an XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v1.2. The issue arises from handling user input in the search field, allowing a crafted payload to be injected and potentially execute arbitrary code. Affected software is PHPGurukul Online Fire ...

4.8CVSS5.1AI score0.00537EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/10 12:00 a.m.•5 views

CVE-2023-36940: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.3AI score0.00537EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2023/06/05 7:03 a.m.•61 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=. id: CVE-2022-31981 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

7.2CVSS7.4AI score0.01988EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2023/06/05 7:03 a.m.•52 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=. id: CVE-2022-31982 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to S...

7.2CVSS7.4AI score0.01988EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2023/06/05 7:03 a.m.•72 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter. id: CVE-2022-31879 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat,j4vaovo severity: high description: | Online Fire Reporting System 1.0 is vulnerable to SQL Injection via t...

8.8CVSS9.1AI score0.01419EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2023/06/05 7:03 a.m.•56 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/managerequest&id=. id: CVE-2022-31983 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to...

7.2CVSS7.4AI score0.02648EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2023/06/05 7:03 a.m.•58 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=. id: CVE-2022-31980 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

7.2CVSS7.4AI score0.01988EPSS
SaveExploits1References3
Rows per page
Query Builder