CVE-2022-28105: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...