Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manage_user&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.