漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cross Site Scripting in PHPGurukul Online Fire Reporting System
Vulnerability Description
Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the endpoint '/ofrs/admin/edit-team.php'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal its cookie session details.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Online Fire Reporting System 跨站脚本漏洞
Vulnerability Description
Online Fire Reporting System是Carlo Montero个人开发者的一个在线火灾报告系统。 Online Fire Reporting System 1.2版本存在跨站脚本漏洞，该漏洞源于对GET参数tname和POST参数teamleadname、teammember、teamname的输入验证不足，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A