Vulnerabilities > Baby Care System Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-21 | CVE-2022-28432 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2. | 9.8 |
| 2022-04-21 | CVE-2022-28433 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=. | 9.8 |
| 2022-04-21 | CVE-2022-28434 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2. | 9.8 |
| 2022-04-21 | CVE-2022-28435 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1. | 9.8 |
| 2022-04-21 | CVE-2022-28436 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=. | 9.8 |
| 2022-04-21 | CVE-2022-28437 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3. | 9.8 |
| 2022-04-21 | CVE-2022-28438 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=. | 9.8 |
| 2022-04-21 | CVE-2022-28439 | SQL Injection vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4. | 9.8 |
| 2021-03-10 | CVE-2020-35752 | Cross-site Scripting vulnerability in Baby Care System Project Baby Care System 1.0 Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter. | 5.4 |
| 2021-02-17 | CVE-2021-25780 | Unrestricted Upload of File with Dangerous Type vulnerability in Baby Care System Project Baby Care System 1.0 An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. | 7.2 |