cve/2022/CVE-2022-36259.md
2024-06-18 02:51:15 +02:00

760 B

CVE-2022-36259

Description

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.

POC

Reference

Github

No PoCs found on GitHub currently.