Visual Integrated Command And Dispatch Platform
Monthly
Unauthenticated SQL injection in Rongzhitong Visual Integrated Command and Dispatch Platform (all versions through build 20260617) exposes the `/dm/dispatch/user/findAll` endpoint to remote database manipulation via the unsanitized `Name` parameter. A publicly available exploit has been published, and the vendor has not responded to responsible disclosure, meaning no patch exists. With CVSS 4.0 AV:N/PR:N and a live exploit, any internet-exposed deployment is at immediate risk of data extraction or modification.
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 6.5).
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 7.3).
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 5.3).
Unauthenticated SQL injection in Rongzhitong Visual Integrated Command and Dispatch Platform (all versions through build 20260617) exposes the `/dm/dispatch/user/findAll` endpoint to remote database manipulation via the unsanitized `Name` parameter. A publicly available exploit has been published, and the vendor has not responded to responsible disclosure, meaning no patch exists. With CVSS 4.0 AV:N/PR:N and a live exploit, any internet-exposed deployment is at immediate risk of data extraction or modification.
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 6.5).
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 7.3).
Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 5.3).