CVE-2022-31973

Description

References

• k0xx11/bug_report · Exploit

More vulnerabilities in online fire reporting system

• CVE-2022-34611MEDIUM 5.4A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrar…
• CVE-2022-31879HIGH 8.8Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.
• CVE-2022-31906MEDIUM 4.8Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.
• CVE-2022-31415MEDIUM 6.5Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.
• CVE-2022-31984HIGH 7.2Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.