PT-2022-22918
CVE-2022-35602
·
تاريخ النشر
2022-08-18
·
تاريخ التحديث
2022-08-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
sazanrjb InventoryManagementSystem version 1.0
Description
A SQL injection issue in UserDAO.java allows attackers to execute arbitrary SQL commands via the
user parameter. This enables unauthorized access and manipulation of database content.Recommendations
For sazanrjb InventoryManagementSystem version 1.0, consider restricting access to the UserDAO.java module to minimize the risk of exploitation. Avoid using the
user parameter in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾