Lucene search
China National Vulnerability DatabaseCNVD-2022-35532HistoryApr 24, 2022 - 12:00 a.m.
Sourcecodester Baby Care System SQL注入漏洞（CNVD-2022-35532）
2022-04-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
sourcecodester baby care system
sql injection
vulnerability
validation
external input
sql statements
setid parameter
babycare
admin.php
theme
attacker
illegal commands
sensitive data
database
EPSS
0.002
Percentile
54.5%
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the setid parameter in BabyCare/admin.php?id=theme & setid=, which could be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.
Related
prion
prion
Sql injection
2022-04-21 20:15:00
cvelist
cvelist
CVE-2022-28420
2022-04-21 19:05:06
nvd
nvd
CVE-2022-28420
2022-04-21 20:15:10
cve
cve
CVE-2022-28420
2022-04-21 20:15:10