CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-08-18

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Inventorymanagementsystem (Inventorymanagementsystem Project)

References

• https://github.com/sazanrjb/InventoryManagementSystem
• https://github.com/sazanrjb/InventoryManagementSystem/issues/14