Baby Care System

CVEs (23)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-28439	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
CVE-2022-28438	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
CVE-2022-28437	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
CVE-2022-28436	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
CVE-2022-28435	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
CVE-2022-28434	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
CVE-2022-28433	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
CVE-2022-28432	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
CVE-2022-28431	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
CVE-2022-28429	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
CVE-2022-28427	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
CVE-2022-28426	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
CVE-2022-28425	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
CVE-2022-28424	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
CVE-2022-28423	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
CVE-2022-28422	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
CVE-2022-28421	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
CVE-2022-28420	Janobe Baby Care System	Cri	0.64	9.8	0.01	Apr 21, 2022	Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
CVE-2021-25779	Janobe Baby Care System	Cri	0.64	9.8	0.01	Feb 17, 2021	Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
CVE-2021-25780	Janobe Baby Care System	Hig	0.47	7.2	0.02	Feb 17, 2021	An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.

CVE-2022-28439CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
CVE-2022-28438CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
CVE-2022-28437CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
CVE-2022-28436CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
CVE-2022-28435CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
CVE-2022-28434CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
CVE-2022-28433CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
CVE-2022-28432CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
CVE-2022-28431CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
CVE-2022-28429CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
CVE-2022-28427CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
CVE-2022-28426CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
CVE-2022-28425CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
CVE-2022-28424CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
CVE-2022-28423CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
CVE-2022-28422CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
CVE-2022-28421CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
CVE-2022-28420CriApr 21, 2022
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
CVE-2021-25779CriFeb 17, 2021
Janobe
Baby Care System
risk 0.64cvss 9.8epss 0.01
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
CVE-2021-25780HigFeb 17, 2021
Janobe
Baby Care System
risk 0.47cvss 7.2epss 0.02
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.

Page 1 of 2