3 matches found
CVE-2022-28962: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...
9.8CVSS8.3AI score0.01666EPSS
SaveExploits1References2
PT-2022-19329
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /scbs/classes/Users.php?f=delete client API endpoint. The estimated number of potentially affected devic...
9.8CVSS0.01666EPSS
SaveExploits1References4
CVE-2022-29652: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=saveclient...
6.1CVSS6.4AI score0.00846EPSS
SaveExploits1References2
20