CVE-2022-31951

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0

Description The issue concerns SQL Injection, which can be exploited via the /rdms/classes/Master.php?f=delete respondent type API endpoint. This allows for potential manipulation of database queries.

Recommendations For Rescue Dispatch Management System version 1.0, as a temporary workaround, consider restricting access to the /rdms/classes/Master.php API endpoint, specifically the delete respondent type function, until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.