CVE-2022-35606

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'...

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc...

CVE-2022-36259

CVE-2022-36259 corresponds to a SQL injection vulnerability in the sazanrjb InventoryManagementSystem 1.0, specifically in ConnectionFactory.java. The issue enables attackers to execute arbitrary SQL via parameters such as username and password, potentially leading to unauthorized access or manip...

CVE-2022-35602

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user...

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

CVE-2022-35599

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode...

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

CVE-2022-35605

Summary (CVE-2022-35605) : A SQL injection vulnerability affects sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing attackers to execute arbitrary SQL via parameters such as users and pass . The NVD entry cites a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector and ...

CVE-2022-35603

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt...

CVE-2022-35602

CVE-2022-35602 is a SQL injection vulnerability affecting sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing an attacker to execute arbitrary SQL commands via the user parameter. Multiple sources (NVD, Red Hat, CVE lists) confirm the issue; CVSS v3.1 score is 9.8 (CRITICAL), with n...

CVE-2022-35599

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode...

CVE-2022-35599

CVE-2022-35599 affects the sazanrjb InventoryManagementSystem 1.0, specifically the Stocks.java component. The vulnerability arises from an SQL injection via the productcode parameter, allowing attackers to execute arbitrary SQL commands. The issue is rated high severity (CVSS 3.1: 9.8, CRITICAL)...

CVE-2022-35598

CVE-2022-35598 affects InventoryManagementSystem 1.0 (sazanrjb). The vulnerability is a SQL injection in ConnectionFactoryDAO.java that allows an attacker to execute arbitrary SQL commands through the username parameter. This is supported by multiple sources (NVD entry for CVE-2022-35598 with CVS...

PT-2022-22921 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in UserDAO.java allows attackers to execute arbitrary SQL commands via parameters such as users and pass. Recommendations: For sazanrjb InventoryManagementSyste...

CVE-2022-35604

CVE-2022-35604 is a duplicate of CVE-2022-35601. Connected documents provide concrete details for 35601: a SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 that allows attackers to execute arbitrary SQL commands via the parameter searchTxt. Affected softwa...