Inventorymanagementsystem

inventorymanagementsystem

Vendor: Inventorymanagementsystem Project • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36259 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.
CVE-2022-36258 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
CVE-2022-36257 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.
CVE-2022-36256 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
CVE-2022-36255 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
CVE-2022-35606 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'
CVE-2022-35605 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.
CVE-2022-35603 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
CVE-2022-35602 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.
CVE-2022-35601 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
CVE-2022-35599 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.
CVE-2022-35598 1Inventorymanagementsystem Project 1Inventorymanagementsystem Jun 17, 2026 Aug 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.