Sql injection

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...

Sql injection

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc...

Sql injection

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt"...

Sql injection

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode"...

CVE-2022-36259

CVE-2022-36259 corresponds to a SQL injection vulnerability in the sazanrjb InventoryManagementSystem 1.0, specifically in ConnectionFactory.java. The issue enables attackers to execute arbitrary SQL via parameters such as username and password, potentially leading to unauthorized access or manip...

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...

CVE-2022-36258

CVE-2022-36258 affects sazanrjb InventoryManagementSystem 1.0, with a SQL injection in CustomerDAO.java that allows attackers to execute arbitrary SQL via parameters such as searchTxt. The primary technical detail across sources is the vulnerable function CustomerDAO.java and the input parameter(...

CVE-2022-36258

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt"...

CVE-2022-36257

The vulnerability CVE-2022-36257 affects sazanrjb’s InventoryManagementSystem 1.0, specifically the UserDAO.java component. It is a SQL injection flaw that allows attackers to execute arbitrary SQL commands through input parameters such as users and pass, enabling unauthorized access or manipulat...

CVE-2022-36257

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc...

CVE-2022-36256

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode"...

CVE-2022-36256

CVE-2022-36256 affects sazanrjb InventoryManagementSystem v1.0, with a SQL injection in Stocks.java that allows attackers to execute arbitrary SQL via parameters such as productcode. The issue is documented across multiple sources (NVD, Red Hat, PRION, PT Security) and is characterized by an atta...

CVE-2022-36255

The CVE-2022-36255 entry concerns a SQL injection in sazanrjb’s InventoryManagementSystem 1.0, specifically in SupplierDAO.java where the vulnerability can be triggered via input parameters such as searchTxt. The affected software/component is the InventoryManagementSystem (sa zanrjb) version 1.0...

CVE-2022-36255

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt"...

PT-2022-23276 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in UserDAO.java allows attackers to execute arbitrary SQL commands via parameters such as users and pass. This enables unauthorized access and manipulation of...

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

CVE-2022-35606

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'...

CVE-2022-35599

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode...

CVE-2022-35599

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode...

CVE-2022-35605

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc...