Lucene search
China National Vulnerability DatabaseCNVD-2022-58675HistoryMay 16, 2022 - 12:00 a.m.
Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58675）
2022-05-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
online sports complex
sql injection
carlo montero
version 1.0
vulnerability
post request
validation
external input
database data
cnvd-2022-58675
EPSS
0.002
Percentile
54.5%
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=delete_category, the id parameter of the post request lacks validation for external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.
Related
cvelist
cvelist
CVE-2022-29985
2022-05-12 15:01:42
cve
cve
CVE-2022-29985
2022-05-12 15:15:08
nvd
nvd
CVE-2022-29985
2022-05-12 15:15:08
prion
prion
Sql injection
2022-05-12 15:15:00