CVE-2022-31996: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...