CVE-2022-28437

CVE-2022-28437 affects Baby Care System v1.0. The vulnerability is a SQL injection in the admin interface, originating in /admin/uesrs.php with parameters action=type, userrole=Admin, and userid, where the userid input is not properly validated. This leads to potential unauthorized access to the ...

CVE-2022-28438: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=...

CVE-2022-28433: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=...

PT-2022-19026

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the /admin/uesrs.php endpoint with specific parameters such as action=display, value=Hide, and userid=. Recommendations For...

CVE-2022-28439: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4...

PT-2022-19027

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/admin/uesrs.php" endpoint with specific parameters such as action, userrole, and userid. For example, the userrole...

PT-2022-19023

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the /admin/uesrs.php endpoint with specific parameters such as action=display, value=Show, and userid=. Recommendations For...

PT-2022-19029

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the /admin/uesrs.php endpoint with specific parameters such as action=delete and userid=4. Recommendations...

CVE-2022-28436: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=...

PT-2022-19028

Name of the Vulnerable Software and Affected Versions Baby Care System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/admin/uesrs.php" endpoint with specific parameters such as action, userrole, and userid. Recommendations For Baby Car...

CVE-2022-28437: Improper Neutralization of Special Elements used in an SQL Command

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3...