Rescue Dispatch Management System Project
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Rescue Dispatch Management System Project records in CISA KEVNo Rescue Dispatch Management System Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Rescue Dispatch Management System · all components
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_respondent_type.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_type.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01096 · Published 2022-06-17 · No fix listed CWE-89
Priority MEDIUM 41
Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete_img.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01128 · Published 2022-06-01 · No fix listed
Priority MEDIUM 40
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00992 · Published 2022-05-23 · No fix listed CWE-863
Priority LOW 25
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0051 · Published 2022-05-23 · No fix listed CWE-79
THREATIST.IORead the docs