Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58676
HistoryMay 16, 2022 - 12:00 a.m.

Online Sports Complex Booking System SQL注入漏洞(CNVD-2022-58676)

2022-05-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.002 Low

EPSS

Percentile

54.6%

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=delete_facility, the id parameter of the post request lacks validation for external input SQL statements, which could be used to execute illegal SQL commands to steal sensitive database data.

0.002 Low

EPSS

Percentile

54.6%

Related for CNVD-2022-58676