CVE-2022-31975: SQL Injection
Published Jun 1, 2022
·Updated
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=.
Affected Software
1 affected component
Online Fire Reporting System Project Online Fire Reporting System=1.0
Event History
Jun 1, 2022
CVE Published
via MITRE·06:19 PM
Data Sourced
via MITRE·06:19 PM
Description
Frequently Asked Questions
1
What is CVE-2022-31975?
CVE-2022-31975 is a vulnerability in Online Fire Reporting System v1.0 that allows for SQL Injection via the /ofrs/admin/?page=user/manage_user&id= parameter.
2
How severe is CVE-2022-31975?
CVE-2022-31975 has a severity rating of 7.2 (high).
3
How does CVE-2022-31975 affect Online Fire Reporting System?
CVE-2022-31975 affects Online Fire Reporting System v1.0 by allowing an attacker to perform SQL Injection attacks through the user/manage_user&id= parameter.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-31975?
CVE-2022-31975 is associated with CWE-89, which is a weakness related to SQL Injection vulnerabilities.
5
How can I fix CVE-2022-31975 vulnerability?
To fix the CVE-2022-31975 vulnerability, it is recommended to implement proper input validation and parameterized queries to prevent SQL Injection attacks.