Inventorymanagementsystem Project vulnerabilities

We track 12 vulnerabilities in Inventorymanagementsystem Project products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2022.

12vulnerabilities

7critical

5high

0exploited

8.8average CVSS score

Latest Inventorymanagementsystem Project vulnerabilities

7.5 High severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-36259Sep 12, 2022Inventorymanagementsystem ProjectEPSS 1.23%
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.
7.5 High severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-36258Sep 12, 2022Inventorymanagementsystem ProjectEPSS 1.06%
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
7.5 High severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-36257Sep 12, 2022Inventorymanagementsystem ProjectEPSS 1.06%
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.
7.5 High severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-36256Sep 12, 2022Inventorymanagementsystem ProjectEPSS 1.06%
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
7.5 High severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-36255Sep 12, 2022Inventorymanagementsystem ProjectEPSS 1.06%
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35606Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.'
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35605Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35603Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35602Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35601Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35599Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.
9.8 Critical severity
Inventorymanagementsystem: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-35598Aug 18, 2022Inventorymanagementsystem Project
A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.