← Database

CVE-2022-36258

HIGH CVSS: 7.5 Published: 2022-09-12 Modified: 2026-06-17

Description

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".

Affected Platforms

Inventorymanagementsystem Project Inventorymanagementsystem

Weakness Type

CWE-89

References