Security Advisory

CVE-2022-35598

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-18 01:17:34
Last updated 2024-08-03 09:36:44
Assigner mitre
State PUBLISHED

Description

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.