CVE-2022-31956

Summary: CVE-2022-31956 affects Rescue Dispatch Management System v1.0. The vulnerability is an SQL Injection in the admin reporting page (/rdms/admin/incident_reports/manage_report.php?id=) caused by unvalidated external input. They report that the page lacks input validation for SQL statements,...

CVE-2022-31959

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manageteam.php?id=...

CVE-2022-31959

CVE-2022-31959 affects Rescue Dispatch Management System v1.0. The vulnerability is a SQL injection in /rdms/admin/teams/manage_team.php?id= due to lack of input validation. Consequences include potential exposure of database data. Exploitation details, affected versions beyond v1.0, and a remedi...

CVE-2022-31961

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manageincident.php?id=...

CVE-2022-31961

The CVE-2022-31961 entry concerns Rescue Dispatch Management System v1.0, which is vulnerable to SQL Injection via the parameter id in /rdms/admin/incidents/manage_incident.php?id=. The Red Hat/CNVD/CNNVD and other connected records corroborate a SQLi flaw originating from lack of input validatio...

CVE-2022-31962

CVE-2022-31962 affects Rescue Dispatch Management System v1.0, with a SQL Injection vulnerability exploitable via /rdms/admin/incidents/view_incident.php?id=. The issue stems from lack of input validation on that parameter, enabling attackers to manipulate SQL queries and potentially access or ex...

CVE-2022-31964

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection in rdms/admin/respondent_types/view_respondent_type.php?id=, due to lack of input validation for external SQL statements. This CVE is referenced across multiple feeds (NVD/NVD CNVD/CNNVD/Red Hat) with a high-severity impact (CV...

CVE-2022-31964

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondenttypes/viewrespondenttype.php?id=...

CVE-2022-31965

CVE-2022-31965 affects Rescue Dispatch Management System v1.0. Multiple connected sources confirm a SQL Injection vulnerability in /rdms/admin/respondent_types/manage_respondent_type.php?id= due to lack of input validation. The consequence is potential database data exposure or modification as de...

CVE-2022-31965

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondenttypes/managerespondenttype.php?id=...

CVE-2022-31946: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...

CVE-2022-31945: Undefined Security Weakness

Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=deleteimg...

CVE-2022-31952: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=deleteincident...

CVE-2022-31953: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...

CVE-2022-31957: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/viewteam.php?id=...

CVE-2022-31959: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manageteam.php?id=...

CVE-2022-31961: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manageincident.php?id=...

PT-2022-21003

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/rdms/admin/respondent types/manage respondent type.php" API endpoint, specifically through the id variable. Recommendatio...

PT-2022-20998

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the id variable in the "rdms/admin/teams/view team.php" API endpoint. Recommendations For Rescue Dispatch Management System...

PT-2022-20999

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows for SQL Injection via the "/rdms/admin/teams/manage team.php" API endpoint, specifically through the id variable. This could potentially lead to unauthorized access or...