CVE-2022-28420

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme=...

CVE-2022-28420

CVE-2022-28420 affects Baby Care System v1.0. The vulnerability is a SQL injection in BabyCare/admin.php?id=theme&setid= due to lack of validation of external input in the setid parameter, enabling arbitrary SQL execution and potential access to sensitive data. Root cause: unsanitized input in th...