15 matches found
CVE-2022-35605
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc...
EUVD-2022-38484
Malicious code in bioql PyPI...
EUVD-2022-38487
Malicious code in bioql PyPI...
EUVD-2022-38975
Malicious code in bioql PyPI...
CVE-2024-12481: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...
CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...
CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...
CVE-2022-36257
The vulnerability CVE-2022-36257 affects sazanrjb’s InventoryManagementSystem 1.0, specifically the UserDAO.java component. It is a SQL injection flaw that allows attackers to execute arbitrary SQL commands through input parameters such as users and pass, enabling unauthorized access or manipulat...
CVE-2022-36257
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc...
CVE-2022-35602
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user...
Sql injection
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user...
Sql injection
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc...
CVE-2022-35605
Summary (CVE-2022-35605) : A SQL injection vulnerability affects sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing attackers to execute arbitrary SQL via parameters such as users and pass . The NVD entry cites a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector and ...
CVE-2022-35602
CVE-2022-35602 is a SQL injection vulnerability affecting sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing an attacker to execute arbitrary SQL commands via the user parameter. Multiple sources (NVD, Red Hat, CVE lists) confirm the issue; CVSS v3.1 score is 9.8 (CRITICAL), with n...