29 matches found
CVE-2022-31941: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manageuser&id=...
PT-2022-20989
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the id variable in the /rdms/admin?page=user/manage user&id= API endpoint. This allows for potential unauthorized access and manipulation of data...
Sql injection
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondenttypes/managerespondenttype.php?id=...
Sql injection
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...
CVE-2022-31946
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...
CVE-2022-31948
CVE-2022-31948 affects Rescue Dispatch Management System v1.0. The vulnerability is a SQL Injection in the endpoint /rdms/classes/Master.php?f=delete_report, caused by lacking input validation. Impact as described: potential disclosure or manipulation of database data. The issue is documented acr...
CVE-2022-31953
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...
CVE-2022-31957
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/viewteam.php?id=...
CVE-2022-31962
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/viewincident.php?id=...
PT-2022-21001
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/rdms/admin/incidents/view incident.php" API endpoint, specifically through the id variable. This allows for potential...
PT-2022-20997
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "/rdms/admin/incident reports/manage report.php" API endpoint, specifically through the id variable. Recommendations For...
CVE-2022-31946: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=deleteteam...
CVE-2022-31965: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondenttypes/managerespondenttype.php?id=...
PT-2022-20993
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the /rdms/classes/Master.php?f=delete report API endpoint. This allows for potential manipulation of database queries. No information is provided...
PT-2022-21002
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue allows for SQL Injection via the "id" parameter in the "/rdms/admin/respondent types/view respondent type.php" API endpoint. Recommendations For Rescue Dispatch Management...
PT-2022-20996
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /rdms/admin/incident reports/view report.php endpoint, specifically through the id parameter. Recommendations...
CVE-2022-31957: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/viewteam.php?id=...
CVE-2022-31961: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manageincident.php?id=...
CVE-2022-31962: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/viewincident.php?id=...
CVE-2022-31964: Improper Neutralization of Special Elements used in an SQL Command
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondenttypes/viewrespondenttype.php?id=...