PT-2022-20994

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /rdms/classes/Master.php?f=delete respondent type API endpoint. This allows for potential manipulation of database...

PT-2022-20992

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete team endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-20996

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /rdms/admin/incident reports/view report.php endpoint, specifically through the id parameter. Recommendations...

PT-2022-21000

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/admin/incidents/manage incident.php endpoint, specifically the id parameter. This allows for potential unauthorized access and manipulatio...

PT-2022-21001

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/rdms/admin/incidents/view incident.php" API endpoint, specifically through the id variable. This allows for potential...

PT-2022-20995

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL injection via the /rdms/classes/Master.php?f=delete incident endpoint. This allows for potential manipulation of database queries. No information is provided abou...

CVE-2022-31962: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/viewincident.php?id=...

CVE-2022-31948: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deletereport...

PT-2022-20993

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete report API endpoint. This allows for potential manipulation of database queries. No information is provided...

CVE-2022-31956: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...

CVE-2022-31951: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleterespondenttype...

CVE-2022-31964: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondenttypes/viewrespondenttype.php?id=...

CVE-2022-31965: Improper Neutralization of Special Elements used in an SQL Command

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondenttypes/managerespondenttype.php?id=...

PT-2022-20991

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows deletion of any file via the "Master.php" file. Specifically, the /rdms/classes/Master.php API endpoint is vulnerable when the f parameter is set to delete img. This...

PT-2022-20997

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/rdms/admin/incident reports/manage report.php" API endpoint, specifically through the id variable. Recommendations For...

PT-2022-21002

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows for SQL Injection via the "id" parameter in the "/rdms/admin/respondent types/view respondent type.php" API endpoint. Recommendations For Rescue Dispatch Management...

Rescue Dispatch Management System Access Control Error Vulnerability

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. version 1.0 of Rescue Dispatch Management System contains an access control error vulnerability that could be exploited by attackers to cause unauthorized access...

Rescue Dispatch Management System跨站脚本漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript programs, steal other user cookies, etc...

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...