A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text field.
References
| Link | Resource |
|---|---|
| http://online.com | Not Applicable |
| https://github.com/As4ki/CVE-report/blob/main/OFRS.md | Exploit Third Party Advisory |
| https://www.sourcecodester.com/ | Not Applicable |
| http://online.com | Not Applicable |
| https://github.com/As4ki/CVE-report/blob/main/OFRS.md | Exploit Third Party Advisory |
| https://www.sourcecodester.com/ | Not Applicable |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://online.com - Not Applicable | |
| References | () https://github.com/As4ki/CVE-report/blob/main/OFRS.md - Exploit, Third Party Advisory | |
| References | () https://www.sourcecodester.com/ - Not Applicable |
02 Aug 2022, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/As4ki/CVE-report/blob/main/OFRS.md - Exploit, Third Party Advisory | |
| References | (MISC) http://online.com - Not Applicable | |
| References | (MISC) https://www.sourcecodester.com/ - Not Applicable | |
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:online_fire_reporting_system_project:online_fire_reporting_system:1.0:*:*:*:*:*:*:* |
27 Jul 2022, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-27 02:15
Updated : 2024-11-21 07:09
NVD link : CVE-2022-34611
Mitre link : CVE-2022-34611
CVE.ORG link : CVE-2022-34611
JSON object : View
Products Affected
online_fire_reporting_system_project
- online_fire_reporting_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')