← Database

CVE-2022-35605

CRITICAL CVSS: 9.8 Published: 2022-08-18 Modified: 2026-06-17

Description

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass', etc.

Affected Platforms

Inventorymanagementsystem Project Inventorymanagementsystem

Weakness Type

CWE-89

References