PT-2022-21020

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the bcms/admin/?page=reports/daily services report&date= endpoint, specifically through the date parameter. Recommendatio...

PT-2022-21018

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=reports/daily sales report&date= endpoint. The date parameter is vulnerable to SQL injecti...

PT-2022-21032

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/admin/courts/view court.php endpoint, specifically through the id parameter. This allows for potential manipulation of database queries...

PT-2022-21035

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/services/view service.php?id=" API endpoint. The id variable is vulnerable to injection attacks...

PT-2022-21029

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the "/bcms/admin/?page=service transactions/manage service transaction&id=" API endpoint, specifically through the id variable. This could...

CVE-2022-32006: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...

CVE-2022-32005: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...

CVE-2022-31996: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...

PT-2022-21019

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/admin/?page=reports/daily court rental report&date= endpoint. This allows for potential manipulation of database queries. No information ...

PT-2022-21030

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "id" parameter in the "/bcms/admin/products/view product.php" API endpoint. Recommendations For Badminton Center Managemen...

PT-2022-21031

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/courts/manage court.php" API endpoint, specifically through the id variable. This allows for potential...

PT-2022-21024

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=court rentals/view court rental&id= endpoint, specifically through the id variable...

CVE-2022-32001: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...

CVE-2022-31988: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

CVE-2022-31994: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...

PT-2022-21033

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "id" parameter in the "/bcms/admin/products/manage product.php" API endpoint. Recommendations For Badminton Center...

PT-2022-21027

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the /bcms/admin/?page=sales/manage sale&id= API endpoint, specifically through the id variable. This could potentially lead to unauthorized data...

CVE-2022-31985: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

CVE-2022-32004: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

CVE-2022-32000: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction&id=...