mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 18:52:12 +00:00
19 lines
735 B
Markdown
19 lines
735 B
Markdown
|
### [CVE-2022-36256](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36256)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://gist.github.com/ziyishen97/0fd90a5939ffb401e8a74f4a415e1610
|
||
|
|
- https://github.com/sazanrjb/InventoryManagementSystem/issues/14
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
No PoCs found on GitHub currently.
|
||
|
|
|