.. / CVE-2022-31984

Exploit for Online Fire Reporting System v1.0 - SQL injection (CVE-2022-31984)

Description:

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.

Nuclei Template

View the template here CVE-2022-31984.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-31984.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2022-31984
https://www.sourcecodester.com/php/15346/online-fire-reporting-system-phpoop-free-source-code.html
https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/online-fire-reporting-system/SQLi-10.md