Approved changes feed: RSS · Atom

cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorJanobe (958e97e2-37fb-58eb-baa2-792f3e424acf)
ProductBaby Care System (10347336-5300-5279-b013-17f9e51876d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12933 vulnerable 2026-06-03 14:58:45.201328 SourceCodester Baby Care System updatewelcome.php sql injection
MEDIUM (6.3)
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2025-11-10T05:32:06.842Z
Updated: 2025-11-10T15:33:44.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12932 vulnerable 2026-06-03 14:58:45.200686 SourceCodester Baby Care System admin.php sql injection
MEDIUM (4.7)
A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-10T05:02:06.367Z
Updated: 2025-11-10T15:35:31.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28439 vulnerable 2026-06-03 14:46:54.825827 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
Published: 2022-04-21T19:04:52.000Z
Updated: 2024-08-03T05:56:15.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28438 vulnerable 2026-06-03 14:46:54.825408 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
Published: 2022-04-21T19:04:53.000Z
Updated: 2024-08-03T05:56:15.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28437 vulnerable 2026-06-03 14:46:54.825142 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
Published: 2022-04-21T19:04:54.000Z
Updated: 2024-08-03T05:56:15.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28436 vulnerable 2026-06-03 14:46:54.824871 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
Published: 2022-04-21T19:04:54.000Z
Updated: 2024-08-03T05:56:15.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28435 vulnerable 2026-06-03 14:46:54.824598 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
Published: 2022-04-21T19:04:55.000Z
Updated: 2024-08-03T05:56:15.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28434 vulnerable 2026-06-03 14:46:54.824324 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
Published: 2022-04-21T19:04:56.000Z
Updated: 2024-08-03T05:56:15.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28433 vulnerable 2026-06-03 14:46:54.824054 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
Published: 2022-04-21T19:04:56.000Z
Updated: 2024-08-03T05:56:15.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28432 vulnerable 2026-06-03 14:46:54.823786 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
Published: 2022-04-21T19:04:57.000Z
Updated: 2024-08-03T05:56:15.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28431 vulnerable 2026-06-03 14:46:54.823505 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
Published: 2022-04-21T19:04:57.000Z
Updated: 2024-08-03T05:56:15.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28429 vulnerable 2026-06-03 14:46:54.823238 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
Published: 2022-04-21T19:04:59.000Z
Updated: 2024-08-03T05:56:15.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28427 vulnerable 2026-06-03 14:46:54.822954 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
Published: 2022-04-21T19:05:01.000Z
Updated: 2024-08-03T05:56:15.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28426 vulnerable 2026-06-03 14:46:54.822683 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
Published: 2022-04-21T19:05:07.000Z
Updated: 2024-08-03T05:56:15.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28425 vulnerable 2026-06-03 14:46:54.822399 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
Published: 2022-04-21T19:05:02.000Z
Updated: 2024-08-03T05:56:15.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28424 vulnerable 2026-06-03 14:46:54.822112 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
Published: 2022-04-21T19:05:03.000Z
Updated: 2024-08-03T05:56:15.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28423 vulnerable 2026-06-03 14:46:54.821836 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
Published: 2022-04-21T19:05:04.000Z
Updated: 2024-08-03T05:56:15.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28422 vulnerable 2026-06-03 14:46:54.821545 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
Published: 2022-04-21T19:05:04.000Z
Updated: 2024-08-03T05:56:15.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28421 vulnerable 2026-06-03 14:46:54.821236 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
Published: 2022-04-21T19:05:05.000Z
Updated: 2024-08-03T05:56:15.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28420 vulnerable 2026-06-03 14:46:54.820820 Details available
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
Published: 2022-04-21T19:05:06.000Z
Updated: 2024-08-03T05:56:15.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25780 vulnerable 2026-06-03 14:44:05.844942 Details available
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.
Published: 2021-02-17T14:32:39.000Z
Updated: 2024-08-03T20:11:28.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25779 vulnerable 2026-06-03 14:44:05.844524 Details available
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
Published: 2021-02-17T14:32:32.000Z
Updated: 2024-08-03T20:11:28.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35752 vulnerable 2026-06-03 14:42:32.287185 Details available
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
Published: 2021-03-10T14:15:25.000Z
Updated: 2024-08-04T17:09:15.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.