CVE-2022-31976

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest...

CVE-2022-31977

Online Fire Reporting System v1.0 is affected by a SQL Injection in Master.php?f=delete_team. The nuclei template confirms an SQLi path; CVE-2022-31977 has a reported CVSSv3.1 score of 9.8 and CWE-89. Impact describes arbitrary SQL execution, data leakage or manipulation, with high confidentialit...

CVE-2022-31977

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam...

CVE-2022-31978

Online Fire Reporting System v1.0 is affected by a SQL injection in /ofrs/classes/Master.php?f=delete_inquiry. The vulnerability stems from unsafely constructed SQL queries, allowing an attacker to execute arbitrary SQL and potentially cause data disclosure, modification, or unauthorized access. ...

CVE-2022-31978

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry...

CVE-2022-31980

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=. The root cause is unsanitized user input used in SQL queries, potentially enabling arbitrary SQL execution, data disclosure, or data manipulation. CVSS3.1 base score 7.2 (HIGH). Remediati...

CVE-2022-31980

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manageteam&id=...

CVE-2022-31981

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin page parameter id (/ofrs/admin/?page=teams/view_team&id=). The Red Hat advisory also notes the same vector. Root cause identified as unsafe SQL construction leading to data exposure/manipulation; CVSS 3.1 ...

CVE-2022-31981

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=...

CVE-2022-31982

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin interface parameter id (path: /ofrs/admin/?page=requests/view_request&id=). The issue is caused by insufficient input validation/exploitation of untrusted input, enabling arbitrary SQL queries and partial/...

CVE-2022-31982

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

CVE-2022-31983

CVE-2022-31983 affects Online Fire Reporting System v1.0. The vulnerability is a SQL Injection via the parameter /ofrs/admin/?page=requests/manage_request&id=. The root cause described across sources is lack of validation/sanitization of user input used in SQL queries. Impact stated in sources in...

CVE-2022-31983

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/managerequest&id=...

CVE-2022-31984

CVE-2022-31984 affects Online Fire Reporting System v1.0. The connected documents specify a SQL Injection vulnerability in /ofrs/admin/requests/take_action.php?id=, caused by improper handling of user-supplied input. The Nuclei template lists this as a high-severity SQLi with potential impact inc...

CVE-2022-31984

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=...

236.red-88-26-178.staticip.rima-tde.net Cross Site Scripting vulnerability OBB-2634675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

utmb.edu Cross Site Scripting vulnerability OBB-2633706

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System (RRS) v500 is affected by a reflected Cross‑Site Scripting (XSS) vulnerability in RRSWeb/maint/ShowDocument/ShowDocument.aspx. The issue arises from the fileName parameter being reflected into a JavaScript context, enabling injection of arbitrary scr...

Apache Archiva Security Feature Issue Vulnerability

Apache Archiva is a suite of software from the Apache Foundation for managing one or more remote stores. The software provides remote Repository agents, role-based security access management, and usage reporting. Apache Archiva is vulnerable to a security feature issue that can be exploited by an...

[Template] Incident Response for Management Presentation

Security incidents occur. It's not a matter of "if," but of "when." That's why you implemented security products and procedures to optimize the incident response IR process. However, many security pros who are doing an excellent job in handling incidents find effectively communicating the ongoing...