Online Fire Reporting System Project

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Online Fire Reporting System Project records in CISA KEV

No Online Fire Reporting System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Fire Reporting System 15 records MEDIUM

Records

15 records in Online Fire Reporting System · all components

TI-2022-13767 CVE-2022-31978 · GHSA-hh26-v9xw-mvg7

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry.

MEDIUM 52

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07043 Published 2022-06-01 No fix listed CWE-89

TI-2022-13766 CVE-2022-31977 · GHSA-2r89-3cpr-6vj2

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_team.

MEDIUM 52

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_team.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07043 Published 2022-06-01 No fix listed CWE-89

TI-2022-13765 CVE-2022-31976 · GHSA-m666-prm4-2vjq

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_request.

MEDIUM 52

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07043 Published 2022-06-01 No fix listed CWE-89

TI-2022-13721 CVE-2022-31879 · GHSA-76rw-mc6q-q7vr

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.

MEDIUM 41

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01441 Published 2022-07-26 No fix listed CWE-89

TI-2022-13772 CVE-2022-31984 · GHSA-vc6m-c5qg-65hv

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.

LOW 39

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04782 Published 2022-06-01 No fix listed CWE-89

TI-2022-13764 CVE-2022-31975 · GHSA-48mc-2h88-rw95

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manage_user&id=.

LOW 39

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manage_user&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04782 Published 2022-06-01 No fix listed CWE-89

TI-2022-13763 CVE-2022-31974 · GHSA-g4cm-mg48-gf2f

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=.

LOW 39

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04914 Published 2022-06-01 No fix listed CWE-89

TI-2022-13771 CVE-2022-31983 · GHSA-c723-3w3j-qx3w

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage_request&id=.

LOW 37

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage_request&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02648 Published 2022-06-01 No fix listed CWE-89

TI-2022-13770 CVE-2022-31982 · GHSA-2wvj-7gj7-2j5w

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/view_request&id=.

LOW 36

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/view_request&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0202 Published 2022-06-01 No fix listed CWE-89

TI-2022-13769 CVE-2022-31981 · GHSA-73wc-2pwc-m23m

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view_team&id=.

LOW 36

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view_team&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0202 Published 2022-06-01 No fix listed CWE-89

TI-2022-13768 CVE-2022-31980 · GHSA-f557-g4cv-vm7j

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=.

LOW 36

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0202 Published 2022-06-01 No fix listed CWE-89

TI-2022-13762 CVE-2022-31973 · GHSA-w444-547g-p6cm

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img.

LOW 31

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00991 Published 2022-06-01 No fix listed

TI-2022-13377 CVE-2022-31415 · GHSA-x7rj-fp4f-6jhj

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability…

LOW 31

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00952 Published 2022-06-14 No fix listed CWE-89

TI-2022-15449 CVE-2022-34611 · GHSA-x4q2-hpmw-6w22

A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire…

LOW 25

A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text fi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00538 Published 2022-07-27 No fix listed CWE-79

TI-2022-13735 CVE-2022-31906 · GHSA-wmrj-cx86-3832

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.

LOW 23

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0051 Published 2022-06-16 No fix listed CWE-79

Open these records in search →

Critical	3
High	8
Medium	4
Low	0
No CVSS	0