PT-2022-22918

Name of the Vulnerable Software and Affected Versions sazanrjb InventoryManagementSystem version 1.0 Description A SQL injection issue in UserDAO.java allows attackers to execute arbitrary SQL commands via the user parameter. This enables unauthorized access and manipulation of database content...

CVE-2022-35603: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt...

PT-2022-22915

Name of the Vulnerable Software and Affected Versions sazanrjb InventoryManagementSystem version 1.0 Description A SQL injection issue in ConnectionFactoryDAO.java allows attackers to execute arbitrary SQL commands via the username parameter. Recommendations For sazanrjb InventoryManagementSystem...

CVE-2022-35598: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

CVE-2022-35606: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'...

CVE-2022-35604

CVE-2022-35604 is a duplicate of CVE-2022-35601. Connected documents provide concrete details for 35601: a SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 that allows attackers to execute arbitrary SQL commands via the parameter searchTxt. Affected softwa...