Vulnerabilities (CVE)

Filtered by vendor Phpgurukul Subscribe
Filtered by product Online Fire Reporting System
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-34987 1 Phpgurukul 1 Online Fire Reporting System 2025-04-03 N/A 9.1 CRITICAL
A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.
CVE-2023-36942 1 Phpgurukul 1 Online Fire Reporting System 2024-11-21 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field.
CVE-2023-36941 1 Phpgurukul 1 Online Fire Reporting System 2024-11-21 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.
CVE-2023-36940 1 Phpgurukul 1 Online Fire Reporting System 2024-11-21 N/A 4.8 MEDIUM
Cross Site Scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field.