cbcvebase.
CVE-2022-31978
published 2022-06-02

CVE-2022-31978: Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry.

PriorityP356critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
7.16%
93.5th percentile
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry.

Affected

1 ranges
VendorProductVersion rangeFixed in
online_fire_reporting_system_projectonline_fire_reporting_system——

Detection & IOCsextracted from sources · hover to see the quote

url/ofrs/classes/Master.php?f=delete_inquiry↗
commandid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN↗
  • →Detect time-based blind SQLi exploitation attempts targeting the delete_inquiry endpoint by monitoring POST requests to /classes/Master.php?f=delete_inquiry with SQL sleep payloads in the body (e.g., SLEEP(6)), and flag responses with HTTP 200, Content-Type text/html, and body containing 'status":"success' after a duration >= 6 seconds. ↗
  • →Match response body containing the string 'status":"success' combined with a delayed response (>=6s) on POST to the vulnerable endpoint as a high-confidence indicator of successful SQLi exploitation. ↗
  • ·The vulnerable path in the NVD description includes the /ofrs/ prefix (/ofrs/classes/Master.php?f=delete_inquiry), while the Nuclei template uses /classes/Master.php?f=delete_inquiry without the prefix. Detections should account for both path variants depending on deployment configuration. ↗
  • ·The Nuclei template uses a 10-second timeout and a SLEEP(6) payload for time-based detection; network latency or server load may cause false positives or false negatives. Tune the duration threshold accordingly. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.