<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: inventorymanagementsystem project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-36259: A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attac</title><link>https://patchthecve.com/cve/CVE-2022-36259.html</link><guid>https://patchthecve.com/cve/CVE-2022-36259.html</guid><pubDate>Wed, 17 Jun 2026 04:53:08 +0000</pubDate><description>HIGH 7.5: A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &quot;username&quot;, &quot;password&quot;, etc.</description></item><item><title>CVE-2022-36258: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t</title><link>https://patchthecve.com/cve/CVE-2022-36258.html</link><guid>https://patchthecve.com/cve/CVE-2022-36258.html</guid><pubDate>Wed, 17 Jun 2026 04:53:07 +0000</pubDate><description>HIGH 7.5: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &quot;searchTxt&quot;.</description></item><item><title>CVE-2022-36257: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex</title><link>https://patchthecve.com/cve/CVE-2022-36257.html</link><guid>https://patchthecve.com/cve/CVE-2022-36257.html</guid><pubDate>Wed, 17 Jun 2026 04:53:07 +0000</pubDate><description>HIGH 7.5: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &quot;users&quot;, &quot;pass&quot;, etc.</description></item><item><title>CVE-2022-36256: A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to exe</title><link>https://patchthecve.com/cve/CVE-2022-36256.html</link><guid>https://patchthecve.com/cve/CVE-2022-36256.html</guid><pubDate>Wed, 17 Jun 2026 04:53:07 +0000</pubDate><description>HIGH 7.5: A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &quot;productcode&quot;.</description></item><item><title>CVE-2022-36255: A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t</title><link>https://patchthecve.com/cve/CVE-2022-36255.html</link><guid>https://patchthecve.com/cve/CVE-2022-36255.html</guid><pubDate>Wed, 17 Jun 2026 04:53:06 +0000</pubDate><description>HIGH 7.5: A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &quot;searchTxt&quot;.</description></item><item><title>CVE-2022-35606: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t</title><link>https://patchthecve.com/cve/CVE-2022-35606.html</link><guid>https://patchthecve.com/cve/CVE-2022-35606.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter &#x27;customerCode.&#x27;</description></item><item><title>CVE-2022-35605: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex</title><link>https://patchthecve.com/cve/CVE-2022-35605.html</link><guid>https://patchthecve.com/cve/CVE-2022-35605.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as &#x27;users&#x27;, &#x27;pass&#x27;, etc.</description></item><item><title>CVE-2022-35603: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t</title><link>https://patchthecve.com/cve/CVE-2022-35603.html</link><guid>https://patchthecve.com/cve/CVE-2022-35603.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.</description></item><item><title>CVE-2022-35602: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex</title><link>https://patchthecve.com/cve/CVE-2022-35602.html</link><guid>https://patchthecve.com/cve/CVE-2022-35602.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.</description></item><item><title>CVE-2022-35601: A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t</title><link>https://patchthecve.com/cve/CVE-2022-35601.html</link><guid>https://patchthecve.com/cve/CVE-2022-35601.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt.</description></item><item><title>CVE-2022-35599: A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to exe</title><link>https://patchthecve.com/cve/CVE-2022-35599.html</link><guid>https://patchthecve.com/cve/CVE-2022-35599.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter productcode.</description></item><item><title>CVE-2022-35598: A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows at</title><link>https://patchthecve.com/cve/CVE-2022-35598.html</link><guid>https://patchthecve.com/cve/CVE-2022-35598.html</guid><pubDate>Wed, 17 Jun 2026 04:51:58 +0000</pubDate><description>CRITICAL 9.8: A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username.</description></item></channel></rss>