CVE-2022-35599

CVE-2022-35599 affects the sazanrjb InventoryManagementSystem 1.0, specifically the Stocks.java component. The vulnerability arises from an SQL injection via the productcode parameter, allowing attackers to execute arbitrary SQL commands. The issue is rated high severity (CVSS 3.1: 9.8, CRITICAL)...

CVE-2022-36259

CVE-2022-36259 corresponds to a SQL injection vulnerability in the sazanrjb InventoryManagementSystem 1.0, specifically in ConnectionFactory.java. The issue enables attackers to execute arbitrary SQL via parameters such as username and password, potentially leading to unauthorized access or manip...

CVE-2022-36257

The vulnerability CVE-2022-36257 affects sazanrjb’s InventoryManagementSystem 1.0, specifically the UserDAO.java component. It is a SQL injection flaw that allows attackers to execute arbitrary SQL commands through input parameters such as users and pass, enabling unauthorized access or manipulat...

CVE-2022-36258

CVE-2022-36258 affects sazanrjb InventoryManagementSystem 1.0, with a SQL injection in CustomerDAO.java that allows attackers to execute arbitrary SQL via parameters such as searchTxt. The primary technical detail across sources is the vulnerable function CustomerDAO.java and the input parameter(...

CVE-2022-36255

The CVE-2022-36255 entry concerns a SQL injection in sazanrjb’s InventoryManagementSystem 1.0, specifically in SupplierDAO.java where the vulnerability can be triggered via input parameters such as searchTxt. The affected software/component is the InventoryManagementSystem (sa zanrjb) version 1.0...

CVE-2022-35598

CVE-2022-35598 affects InventoryManagementSystem 1.0 (sazanrjb). The vulnerability is a SQL injection in ConnectionFactoryDAO.java that allows an attacker to execute arbitrary SQL commands through the username parameter. This is supported by multiple sources (NVD entry for CVE-2022-35598 with CVS...

CVE-2022-35601

CVE-2022-35601 is a SQL injection vulnerability in the sazanrjb InventoryManagementSystem 1.0, located in SupplierDAO.java where the vulnerable parameter is searchTxt. The issue allows attackers to execute arbitrary SQL commands via that parameter. Public sources (NVD and related records) confirm...

CVE-2022-35602

CVE-2022-35602 is a SQL injection vulnerability affecting sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing an attacker to execute arbitrary SQL commands via the user parameter. Multiple sources (NVD, Red Hat, CVE lists) confirm the issue; CVSS v3.1 score is 9.8 (CRITICAL), with n...

CVE-2022-35606

The CVE-2022-35606 entry concerns a SQL injection in sazanrjb InventoryManagementSystem 1.0, specifically in CustomerDAO.java via the customerCode parameter. Multiple sources (NVD, Red Hat, CNA/CVELIST, CNNVD, PRION, PT-Security) confirm a vulnerability in the InventoryManagementSystem where an a...

CVE-2022-36256

CVE-2022-36256 affects sazanrjb InventoryManagementSystem v1.0, with a SQL injection in Stocks.java that allows attackers to execute arbitrary SQL via parameters such as productcode. The issue is documented across multiple sources (NVD, Red Hat, PRION, PT Security) and is characterized by an atta...

CVE-2022-35603

CVE-2022-35603 affects sazanrjb InventoryManagementSystem 1.0 in which the vulnerability lies in CustomerDAO.java via the searchTxt parameter, enabling SQL injection and the execution of arbitrary SQL. Root cause: improper handling of user input leading to query manipulation. Impact: high (C/H/I/...

CVE-2022-35605

Summary (CVE-2022-35605) : A SQL injection vulnerability affects sazanrjb InventoryManagementSystem 1.0, in UserDAO.java, allowing attackers to execute arbitrary SQL via parameters such as users and pass . The NVD entry cites a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector and ...