998 matches found
CVE-2022-28421
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=...
CVE-2022-28421
Summary of CVE-2022-28421 : Multiple connected sources document a SQL injection vulnerability in Baby Care System v1.0, exploitable via /admin.php?id=posts&action=display&value=1&postid= (postid parameter). The root cause is lack of input validation/parameterized queries leading to arbitrary SQL ...
CVE-2022-28423
CVE-2022-28423: Baby Care System v1.0 is affected by an SQL injection in the admin interface, with vectors reported as /admin/posts.php&action=delete (and variant /admin.php?id=posts in CNVD/CNNVD). Affected component is the web admin logic; root cause is unsafely handled input in the post-deleti...
CVE-2022-28423
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete...
CVE-2022-28422
The CVE-2022-28422 entry concerns Baby Care System v1.0, which is vulnerable to a SQL injection in the administrative interface. Specifically, the weakness is exposed via /admin/posts.php&action=edit (per multiple sources, e.g., NVD entries and CNVD/CVE records). The root cause is an injectable S...
CVE-2022-28422
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit...
CVE-2022-28424
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=...
CVE-2022-28424
CVE-2022-28424 affects Baby Care System v1.0, with a SQL injection vulnerability in /admin/posts.php&find= that arises from unvalidated external input. The root cause is improper handling of the find parameter, enabling arbitrary SQL execution. Impact is stated by the CVSS data: CVSSv2 base score...
CVE-2022-28425
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=...
CVE-2022-28425
CVE-2022-28425 affects Baby Care System v1.0 and is a SQL injection via /admin/pagerole.php&action=display&value=1&roleid=. The root cause is lack of input validation on the roleid parameter, enabling arbitrary SQL execution and potential data exposure. Multiple sources (CNVD/CNNVD, Red Hat/PRION...
CVE-2022-28427
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...
CVE-2022-28427
CVE-2022-28427 affects Baby Care System v1.0. The vulnerability is a SQL injection in the admin workflow, specifically via the parameter in /admin/inbox.php&action=read&msgid= where input is not properly validated. Reported impact includes potential exposure, modification, and disruption of data ...
CVE-2022-28429
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...
CVE-2022-28429
CVE-2022-28429 affects Baby Care System v1.0. The vulnerability is a SQL injection in /admin/inbox.php (parameters: action=delete&msgid=) caused by lack of validation for external input in the msgid parameter. This can allow an attacker to execute arbitrary SQL commands and potentially exfiltrate...
CVE-2022-28431
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2...
CVE-2022-28432
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2...
CVE-2022-28432
The CVE-2022-28432 entry concerns Baby Care System v1.0 with a SQL injection vulnerability exploitable via /admin.php?id=siteoptions&social=display&value=0&sid=2. Public sources describe that the vulnerability arises from missing validation of external input in the SQL statement, enabling potenti...
CVE-2022-28431
CVE-2022-28431 affects Baby Care System v1.0 with a SQL injection in /admin/siteoptions.php via the sid parameter (existing query includes social=remove&sid=2). The root cause is lack of input validation for sid, enabling attackers to craft SQL statements. Documented impacts include unauthorized ...
CVE-2022-28434
CVE-2022-28434 affects Baby Care System v1.0. A SQL injection vulnerability exists in admin.php, exploitable via parameters id=siteoptions, social=edit, sid (example sid=2). Multiple sources corroborate a database-input validation flaw leading to potential unauthorized SQL execution and data expo...