Show filters
12 Total Results
Displaying 1-10 of 12
Sort by:
Attacker Value
Unknown

CVE-2022-36259

Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.
Attacker Value
Unknown

CVE-2022-36258

Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
Attacker Value
Unknown

CVE-2022-36257

Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.
Attacker Value
Unknown

CVE-2022-36256

Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
Attacker Value
Unknown

CVE-2022-36255

Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
Attacker Value
Unknown

CVE-2022-35606

Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'
Attacker Value
Unknown

CVE-2022-35605

Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.
Attacker Value
Unknown

CVE-2022-35603

Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
Attacker Value
Unknown

CVE-2022-35602

Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.
Attacker Value
Unknown

CVE-2022-35601

Disclosure Date: August 18, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.