CVE-2022-28427

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.

Source: CVE-2022-28427

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.

Source: CVE-2022-28429

CVE-2022-28431

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.

Source: CVE-2022-28431

CVE-2022-28432

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.

Source: CVE-2022-28432

CVE-2022-28018

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component adminschedule_edit.php.

Source: CVE-2022-28018

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component adminemployee_edit.php.

Source: CVE-2022-28019

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component adminposition_edit.php.

Source: CVE-2022-28020

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.

Source: CVE-2022-28021

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.

Source: CVE-2022-28023

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.

Source: CVE-2022-28022