Show filters
294 Total Results
Displaying 131-140 of 294
Sort by:
Attacker Value
Unknown
CVE-2022-35606
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'
0
Attacker Value
Unknown
CVE-2022-35605
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.
0
Attacker Value
Unknown
CVE-2022-35603
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
0
Attacker Value
Unknown
CVE-2022-35602
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.
0
Attacker Value
Unknown
CVE-2022-35601
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
0
Attacker Value
Unknown
CVE-2022-35599
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.
0
Attacker Value
Unknown
CVE-2022-35598
Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.
0
Attacker Value
Unknown
CVE-2022-31082
Disclosure Date: June 27, 2022 (last updated February 24, 2025)
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plugin is a plugin for GLPI to handle inventory management. In affected versions a SQL injection can be made using package deployment tasks. This issue has been resolved in version 1.0.2. Users are advised to upgrade. Users unable to upgrade should delete the `front/deploypackage.public.php` file if they are not using the `deploy tasks` feature.
0
Attacker Value
Unknown
CVE-2022-31062
Disclosure Date: June 20, 2022 (last updated February 23, 2025)
### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.
0
Attacker Value
Unknown
CVE-2022-31340
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
0
