Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteinquiry lacks validation for external input SQL statements,...

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleterequest lacks validation for external input SQL statements,...

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/ manageteam...

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=user/manage user&id=Lack of validation of external input SQL statements, an...

Solutions Atlantic Regulatory Reporting System Cross-site Scripting Vulnerability

Solutions Atlantic Regulatory Reporting System is a flagship regulatory reporting system from Solutions Atlantic, Inc. Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to a cross-site scripting vulnerability that could be exploited to execute JavaScript code...

PT-2022-19717

Name of the Vulnerable Software and Affected Versions Solutions Atlantic Regulatory Reporting System RRS version v500 Description The issue allows any authenticated user to reference internal system files within requests made to the "RRSWeb/maint/ShowDocument/ShowDocument.aspx" page. The server...

CVE-2022-31973

CVE-2022-31973 affects the Online Fire Reporting System v1.0. The vulnerability arises in the file path /ofrs/classes/Master.php?f=delete_img, where filenames are not properly validated, enabling arbitrary file deletion. This is described consistently across multiple sources in the connected docu...

CVE-2022-31973

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=deleteimg...

CVE-2022-31974

Online Fire Reporting System v1.0 is affected by an SQL Injection in the admin reports date parameter (/ofrs/admin/?page=reports&date=). The issue is triggered by unsafely concatenated SQL, allowing arbitrary queries and potentially data exposure or tampering. The Nuclei template and CNVD/CNNVD e...

CVE-2022-31974

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=...

CVE-2022-31975

Vulnerability : Online Fire Reporting System v1.0 is affected by a SQL Injection in the admin user management endpoint. The issue occurs via /ofrs/admin/?page=user/manage_user&id= (lack of input validation in the parameter), enabling manipulation of SQL queries. Impact : could lead to arbitrary S...

CVE-2022-31975

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=...

CVE-2022-31976

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest...

CVE-2022-31976

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in Master.php?f=delete_request. The issue arises from unsafely incorporating user input into SQL queries, enabling an attacker to execute arbitrary SQL commands and potentially cause data leakage, modification, or comp...

CVE-2022-31977

Online Fire Reporting System v1.0 is affected by a SQL Injection in Master.php?f=delete_team. The nuclei template confirms an SQLi path; CVE-2022-31977 has a reported CVSSv3.1 score of 9.8 and CWE-89. Impact describes arbitrary SQL execution, data leakage or manipulation, with high confidentialit...

CVE-2022-31977

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam...

CVE-2022-31978

Online Fire Reporting System v1.0 is affected by a SQL injection in /ofrs/classes/Master.php?f=delete_inquiry. The vulnerability stems from unsafely constructed SQL queries, allowing an attacker to execute arbitrary SQL and potentially cause data disclosure, modification, or unauthorized access. ...

CVE-2022-31978

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry...

CVE-2022-31980

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...

CVE-2022-31980

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=. The root cause is unsanitized user input used in SQL queries, potentially enabling arbitrary SQL execution, data disclosure, or data manipulation. CVSS3.1 base score 7.2 (HIGH). Remediati...