Janobe Baby Care System vulnerabilities
23 vulnerabilities
Known vulnerabilities in Janobe Baby Care System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25779janobebaby_care_system
EPSS score1.19%
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.CVE-2021-25780janobebaby_care_systemEPSS score2.56%
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.CVE-2025-12933janobebaby_care_system+1EPSS score0.35%
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.CVE-2025-12932janobebaby_care_system+1EPSS score0.36%
A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.CVE-2020-35752janobebaby_care_systemEPSS score0.89%
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.CVE-2022-28420janobebaby_care_systemEPSS score1.29%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.CVE-2022-28439janobebaby_care_systemEPSS score1.29%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.CVE-2022-28426janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.CVE-2022-28433janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.CVE-2022-28424janobebaby_care_systemEPSS score1.29%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.CVE-2022-28435janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.CVE-2022-28436janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.CVE-2022-28429janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.CVE-2022-28423janobebaby_care_systemEPSS score1.29%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.CVE-2022-28425janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.CVE-2022-28437janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.CVE-2022-28421janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.CVE-2022-28438janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.CVE-2022-28431janobebaby_care_systemEPSS score1.24%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.CVE-2022-28422janobebaby_care_systemEPSS score1.29%
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.