CVE-2022-28435

CVE-2022-28435 affects Baby Care System v1.0. A SQL injection vulnerability exists in /admin/siteoptions.php with parameters such as action=displaygoal&value=1&roleid=1, originating from improper input handling. The vulnerable component appears to be the admin siteoptions functionality, enabling ...