CVE-2022-36256

高危 7.5CVE-2022-36256 · Published 12/09/2022 · updated 17/06/2026

要点

CVE-2022-36256 是影响 inventorymanagementsystem (inventorymanagementsystem project) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.0%，高于 64.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
inventorymanagementsystem inventorymanagementsystem_project	`= 1.0`	No fix yet

Description

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".

References

gist.github.com/ziyishen97/0fd90a5939ffb401e8a74f4a415e1610 · Exploit
sazanrjb/InventoryManagementSystem · Product
sazanrjb/InventoryManagementSystem · Exploit

inventorymanagementsystem 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

inventorymanagementsystem

inventorymanagementsystem_project

= 1.0

No fix yet

inventorymanagementsystem 的其他漏洞

查看全部 →