CVE-2022-31976: SQL Injection

Published Jun 1, 2022

Updated

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleterequest.

Affected Software

1 affected component

Online Fire Reporting System Project Online Fire Reporting System=1.0

Event History

Jun 1, 2022

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

Description

Frequently Asked Questions

What is CVE-2022-31976?

CVE-2022-31976 is a vulnerability in the Online Fire Reporting System v1.0 that allows SQL Injection via /ofrs/classes/Master.php?f=delete_request.

How severe is CVE-2022-31976?

CVE-2022-31976 has a severity rating of critical, with a CVSS score of 9.8.

How does CVE-2022-31976 affect the Online Fire Reporting System?

CVE-2022-31976 affects the Online Fire Reporting System v1.0 and allows an attacker to perform SQL Injection through the file /ofrs/classes/Master.php?f=delete_request.

What is the CWE classification for CVE-2022-31976?

CVE-2022-31976 is classified as CWE-89, which is a vulnerability related to SQL Injection.

Is there a fix available for CVE-2022-31976?

Currently, there is no known fix or patch available for CVE-2022-31976. It is recommended to update to a newer, secure version of the Online Fire Reporting System if one becomes available.