.. / CVE-2022-31976

Exploit for Online Fire Reporting System v1.0 - SQL injection (CVE-2022-31976)

Description:

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_request.

Nuclei Template

View the template here CVE-2022-31976.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-31976.yaml
Copy

References:

https://www.sourcecodester.com/php/15346/online-fire-reporting-system-phpoop-free-source-code.html
https://nvd.nist.gov/vuln/detail/CVE-2022-31976
https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/online-fire-reporting-system/SQLi-4.md