CVE-2022-31981: SQL Injection

Published Jun 1, 2022

Updated

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/viewteam&id=.

Affected Software

1 affected component

Online Fire Reporting System Project Online Fire Reporting System=1.0

Event History

Jun 1, 2022

CVE Published

via MITRE·06:10 PM

Data Sourced

via MITRE·06:10 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-31981.

What is the title of this vulnerability?

The title of this vulnerability is 'Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/view_te...'.

What is the affected software?

The affected software is Online Fire Reporting System v1.0.

What is the severity of this vulnerability?

The severity of this vulnerability is high with a CVSS score of 7.2.

How can I exploit this vulnerability?

You can exploit this vulnerability by performing SQL Injection through the 'id' parameter in the URL /ofrs/admin/?page=teams/view_team&id=.

How do I fix this vulnerability?

To fix this vulnerability, you should implement proper input validation and parameterized queries to prevent SQL Injection attacks.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability at https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-fire-reporting-system/SQLi-6.md.

What is the CWE ID for this vulnerability?

The CWE ID for this vulnerability is 89.