CVE-2022-28438

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=...

CVE-2022-28438

The CVE-2022-28438 entry concerns Baby Care System v1.0, which is vulnerable to SQL injection via /admin/uesrs.php&action=type&userrole=User&userid=. Multiple trusted sources (NVD, CNVD, Red Hat advisory, CVE listing) consistently describe SQLi arising from lack of input validation in the userid ...