Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

Inventorymanagementsystem Security Vulnerabilities - November

cve
cve

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
44
4
cve
cve

CVE-2022-35599

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
44
4
cve
cve

CVE-2022-35601

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
37
4
cve
cve

CVE-2022-35602

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
36
4
cve
cve

CVE-2022-35603

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
33
4
cve
cve

CVE-2022-35605

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
27
4
cve
cve

CVE-2022-35606

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'

9.8CVSS

9.9AI Score

0.002EPSS

2022-08-18 02:15 AM
34
4
cve
cve

CVE-2022-36255

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".

7.5CVSS

8AI Score

0.002EPSS

2022-09-12 04:15 AM
38
4
cve
cve

CVE-2022-36256

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".

7.5CVSS

8AI Score

0.002EPSS

2022-09-12 04:15 AM
33
8
cve
cve

CVE-2022-36257

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.

7.5CVSS

8AI Score

0.002EPSS

2022-09-12 04:15 AM
41
7
cve
cve

CVE-2022-36258

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".

7.5CVSS

8AI Score

0.002EPSS

2022-09-12 04:15 AM
43
8
cve
cve

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.

7.5CVSS

8AI Score

0.001EPSS

2022-09-12 04:15 AM
47
8