NetSight
critical9.8

CVE-2022-35605

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters s…

Impact

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.

Affected products

VendorProductAffected versions
Inventorymanagementsystem ProjectInventorymanagementsystem
Version 1.0

Weakness classification

References