NetSight
critical9.8

CVE-2022-35601

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter se…

Impact

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.

Affected products

VendorProductAffected versions
Inventorymanagementsystem ProjectInventorymanagementsystem
Version 1.0

Weakness classification

References