Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-34987 | 1 Phpgurukul | 1 Online Fire Reporting System | 2025-04-03 | N/A | 9.1 CRITICAL |
A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process. | |||||
CVE-2023-36942 | 1 Phpgurukul | 1 Online Fire Reporting System | 2024-11-21 | N/A | 6.1 MEDIUM |
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field. | |||||
CVE-2023-36941 | 1 Phpgurukul | 1 Online Fire Reporting System | 2024-11-21 | N/A | 6.1 MEDIUM |
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields. | |||||
CVE-2023-36940 | 1 Phpgurukul | 1 Online Fire Reporting System | 2024-11-21 | N/A | 4.8 MEDIUM |
Cross Site Scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field. |