Vulnerabilities

TI-2022-16622 CVE-2022-36259 · GHSA-cjf9-jxrx-c3wr

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb…

LOW 35

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01234 Published 2022-09-12 No fix listed CWE-89

TI-2022-16621 CVE-2022-36258 · GHSA-4x5q-4j9q-jcv8

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem…

LOW 35

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01061 Published 2022-09-12 No fix listed CWE-89

TI-2022-16620 CVE-2022-36257 · GHSA-3wmc-pp6x-rp8g

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0…

LOW 35

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01061 Published 2022-09-12 No fix listed CWE-89

TI-2022-16619 CVE-2022-36256 · GHSA-4g4m-73g5-7x72

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0…

LOW 35

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01061 Published 2022-09-12 No fix listed CWE-89

TI-2022-16618 CVE-2022-36255 · GHSA-cjph-938c-9p3j

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem…

LOW 35

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01061 Published 2022-09-12 No fix listed CWE-89

TI-2022-16092 CVE-2022-35606 · GHSA-w8gp-j83h-hw8x

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem…

MEDIUM 44

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00855 Published 2022-08-18 No fix listed CWE-89

TI-2022-16091 CVE-2022-35605 · GHSA-mc8g-vc99-8pp5

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0…

MEDIUM 44

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00873 Published 2022-08-18 No fix listed CWE-89

TI-2022-16090 CVE-2022-35603 · GHSA-pjm8-cf8m-q2h9

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem…

MEDIUM 44

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00873 Published 2022-08-18 No fix listed CWE-89

TI-2022-16089 CVE-2022-35602 · GHSA-crqx-wmf6-58qf

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0…

MEDIUM 44

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0096 Published 2022-08-18 No fix listed CWE-89

TI-2022-16088 CVE-2022-35601 · GHSA-76g9-vvww-9vvf

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem…

MEDIUM 44

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0096 Published 2022-08-18 No fix listed CWE-89

TI-2022-16087 CVE-2022-35599 · GHSA-gqpr-25q3-q375

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0…

MEDIUM 44

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0096 Published 2022-08-18 No fix listed CWE-89

TI-2022-16086 CVE-2022-35598 · GHSA-2j29-gqvx-5862

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb…

MEDIUM 44

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0094 Published 2022-08-18 No fix listed CWE-89

Vulnerabilities

Filters