VendorsJanobebaby_care_system1.0
Vulnerabilities

Janobe Baby Care System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

23CVEs
CVE-2022-28439
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28420
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28422
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28423
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28424
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28436
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28435
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28437
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28433
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28432
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28431
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28429
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28427
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28426
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28425
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28421
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2022-28438
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2021-25779
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
Published 2021-02-17 · Modified
9.8EPSS 0.012
CVE-2022-28434
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
Published 2022-04-21 · Modified
9.8EPSS 0.009
CVE-2025-12932
SourceCodester Baby Care System admin.php sql injection
Published 2025-11-10 · Analyzed
9.8EPSS 0.003
CVE-2025-12933
SourceCodester Baby Care System updatewelcome.php sql injection
Published 2025-11-10 · Analyzed
9.8EPSS 0.003
CVE-2021-25780
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.
Published 2021-02-17 · Modified
7.2EPSS 0.026
CVE-2020-35752
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
Published 2021-03-10 · Modified
5.4EPSS 0.009