Skip to content
Noroxi

Janobe records

169 published records for vendor janobe.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

169 records
  • CVE-2021-41646
    41Plan

    Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file th

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    janobe · online reviewer systemOct 29, 2021

  • CVE-2021-27130
    40Plan

    Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload.

    CriticalCVSS 9.8No exploitEPSS 2%

    janobe · online reviewer systemApr 14, 2021

  • CVE-2023-43470
    39Monitor

    SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php c

    CriticalCVSS 9.8No exploitEPSS 2%

    janobe · online voting systemSep 22, 2023

  • CVE-2022-28424
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28423
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28439
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28422
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28420
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28425
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28438
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28437
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28436
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28435
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28426
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28433
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28421
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28432
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28431
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28429
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2022-28427
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022

  • CVE-2024-44812
    39Monitor

    SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password par

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    janobe · online complaint siteOct 22, 2024

  • CVE-2021-25779
    39Monitor

    Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemFeb 17, 2021

  • CVE-2024-3359
    39Monitor

    SourceCodester Online Library System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · online library systemApr 6, 2024

  • CVE-2024-3360
    39Monitor

    SourceCodester Online Library System index.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · online library systemApr 6, 2024

  • CVE-2022-28434
    39Monitor

    Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.

    CriticalCVSS 9.8No exploitEPSS 1%

    janobe · baby care systemApr 21, 2022