Rescue Dispatch Management System Project Rescue Dispatch Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Rescue Dispatch Management System Project Rescue Dispatch Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2022-31965 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_respondent_type.php?id=.
• CVE-2022-31961 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=.
• CVE-2022-31962 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=.
• CVE-2022-31964 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_type.php?id=.
• CVE-2022-31941 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=.
• CVE-2022-31946 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team.
• CVE-2022-31948 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report.
• CVE-2022-31951 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type.
• CVE-2022-31952 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident.
• CVE-2022-31953 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=.
• CVE-2022-31956 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=.
• CVE-2022-31957 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=.
• CVE-2022-31959 — CVSS 9.8 (critical): Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=.
• CVE-2022-31945 — CVSS 9.1 (critical): Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete_img.
• CVE-2022-30016 — CVSS 8.8 (high): Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
• CVE-2022-30017 — CVSS 5.4 (medium): Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.