CVE-2022-31415

概要

参考情報

• researchinthebin.org/posts/ofrs-sql-injection · Exploit

online fire reporting system のその他の脆弱性

• CVE-2022-34611中 5.4A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrar…
• CVE-2022-31879高 8.8Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.
• CVE-2022-31906中 4.8Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.
• CVE-2022-31984高 7.2Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.
• CVE-2022-31983高 7.2Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage_request&id=.