CVE-2022-28424

CVE-2022-28424 affects Baby Care System v1.0, with a SQL injection vulnerability in /admin/posts.php&find= that arises from unvalidated external input. The root cause is improper handling of the find parameter, enabling arbitrary SQL execution. Impact is stated by the CVSS data: CVSSv2 base score...