CNNVD-202509-1663 Information

CNNVD ID

CNNVD-202509-1663

CVE-2025-40695

  • CNNVD Published: 2025-09-11

Description (Chinese)

Online Fire Reporting System是Carlo Montero个人开发者的一个在线火灾报告系统。 Online Fire Reporting System 1.2版本存在跨站脚本漏洞,该漏洞源于对文件/ofrs/admin/request-details.php中参数remark、status和takeaction的输入验证不足,可能导致存储型跨站脚本攻击。

Description (English)

Online Fire Reporting Systems is an online fire reporting system for Carlo Montero’s personal developers. Online Fire Reporting System 1.2 has a cross-site script loophole, which results from inadequate input verification of the parameters remark, status and playaction in the file/ofrs/admin/request-details.php, which may result in storage-type cross-site script attacks.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2025-09-11

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-phpgurukuls-online-fire-reporting-system

Share on: