CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

Cross site scripting

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34611

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34611

CVE-2022-34611 is an XSS vulnerability affecting Online Fire Reporting System (OFRS) v1.0. The flaw resides in the /index.php/?p=report endpoint, where a crafted payload placed into the "Contac #" field can execute arbitrary scripts/HTML. The NVD entry lists CVSS v3.1 base score 5.4 (Medium) with...

PT-2022-22243 · Unknown · Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.0 Description: A cross-site scripting XSS issue in the /index.php/?p=report endpoint of the Online Fire Reporting System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero Personal Developer. A security vulnerability exists in Online Fire Reporting System v1.0, which originates from a cross-site scripting XSS vulnerability in /index.php/?p=report. The vulnerability can be exploited by ...

CVE-2022-34611: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

CVE-2022-31879 affects Online Fire Reporting System v1.0, with a confirmed SQL injection via the date parameter. Affects the application logic where user input is used in SQL queries, enabling potentially arbitrary queries and unauthorized data access or manipulation as described in multiple sour...

PT-2022-20969 · Unknown · Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.0 Description: The issue concerns SQL Injection via the date parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in version 1.0 of the Online Fire Reporting System due to a security issue with the date parameter in the node app, which can be exploited by an attacker...

CVE-2022-31879: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

The vulnerability of the network software tool, Online Fire Reporting System, is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the network software system, Online Fire Reporting System, is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the...

fire-forum.de Cross Site Scripting vulnerability OBB-2682597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

washingtonfirechiefs.com Cross Site Scripting vulnerability OBB-2673921

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in satoshi-fire-alarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fd5f944916caf41fd3f026383cc7fe3b2f0beb7a5010870922b46fc6eb4baa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5935 Malicious code in satoshi-fire-alarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fd5f944916caf41fd3f026383cc7fe3b2f0beb7a5010870922b46fc6eb4baa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...