Vulnerabilities

TI-2025-11850 CVE-2025-12933 · GHSA-6w3w-2xr2-g4xf

SourceCodester Baby Care System updatewelcome.php sql injection

MEDIUM 57

A vulnerability was identified in SourceCodester Baby Care System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2025-11-10 No fix listed CWE-74

TI-2025-11849 CVE-2025-12932 · GHSA-2jxq-mx43-c7q5

SourceCodester Baby Care System admin.php sql injection

MEDIUM 56

A vulnerability was determined in SourceCodester Baby Care System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00364 Published 2025-11-10 No fix listed CWE-74

TI-2022-11162 CVE-2022-28426 · GHSA-r34m-4f53-rqg5

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11156 CVE-2022-28420 · GHSA-4873-hf88-x635

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11157 CVE-2022-28421 · GHSA-jrr9-p66c-jfhj

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11159 CVE-2022-28423 · GHSA-w4pp-x42p-3jff

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11158 CVE-2022-28422 · GHSA-3mqv-qj2m-7497

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11160 CVE-2022-28424 · GHSA-jw2f-vcgp-295r

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11161 CVE-2022-28425 · GHSA-m3fp-vmww-9vgv

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11163 CVE-2022-28427 · GHSA-8j34-5q65-4hmf

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11164 CVE-2022-28429 · GHSA-c452-mq7q-rm84

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11166 CVE-2022-28432 · GHSA-m5mq-g7m3-hwhm

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11165 CVE-2022-28431 · GHSA-rxf2-6gjw-pqpg

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11168 CVE-2022-28434 · GHSA-pf63-3qvp-c699

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00936 Published 2022-04-21 No fix listed CWE-89

TI-2022-11167 CVE-2022-28433 · GHSA-3hgp-xx2v-3v84

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11169 CVE-2022-28435 · GHSA-vr4x-84fc-9hfq

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11171 CVE-2022-28437 · GHSA-9h25-6r86-rmxc

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11170 CVE-2022-28436 · GHSA-c8pp-x29m-wv8j

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11172 CVE-2022-28438 · GHSA-qjrp-w62x-2crq

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11173 CVE-2022-28439 · GHSA-f8jf-3w6m-6v39

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 45

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2020-18203 CVE-2020-35752 · GHSA-35mv-96c3-9q8w

Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the…

LOW 26

Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00892 Published 2021-03-10 No fix listed CWE-79

TI-2021-07864 CVE-2021-25780 · GHSA-4jwr-58v2-3w35

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care…

LOW 36

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02556 Published 2021-02-17 No fix listed CWE-434

TI-2021-07863 CVE-2021-25779 · GHSA-5hf3-p363-ww52

Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.

MEDIUM 44

Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01188 Published 2021-02-17 No fix listed CWE-89

Vulnerabilities

Filters