Sourcecodester Baby Care System SQL注入漏洞（CNVD-2022-35525）

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & social=remove & sid= where the sid parameter lacks validation for externa...

Sql injection

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1...

CVE-2022-28435

CVE-2022-28435 affects Baby Care System v1.0. A SQL injection vulnerability exists in /admin/siteoptions.php with parameters such as action=displaygoal&value=1&roleid=1, originating from improper input handling. The vulnerable component appears to be the admin siteoptions functionality, enabling ...

PT-2022-19021

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/admin/siteoptions.php" endpoint with specific parameters, including social=remove and sid=2. Recommendations For Baby...

CVE-2022-28431: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2...

CVE-2022-28435: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1...

PT-2022-19025

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the "/admin/siteoptions.php" endpoint with specific parameters such as action, value, and roleid. For...