CVE-2022-28105

Online Sports Complex Booking System v1.0 is affected by a blind SQL injection vulnerability in the id parameter of /scbs/view_facility.php. This flaw, identified in CVE-2022-28105, arises from unsanitized input used in SQL queries, enabling potential disclosure or manipulation of database data. ...

Online Banquet Booking System 跨站请求伪造漏洞

Online Banquet Booking System is an online banquet booking system. version 1.0 of Online Banquet Booking System is vulnerable to cross-site request forgery. An attacker could use this vulnerability to change the administrator credentials via a specially crafted POST request...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

Sql injection

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-29652

CVE-2022-29652 affects Online Sports Complex Booking System 1.0, with a SQL Injection flaw in the endpoint /scbs/classes/Users.php?f=save_client. The connected records confirm the issue is a database query manipulation risk due to insufficient input validation/output filtering at that endpoint, p...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-29304

CVE-2022-29304 affects the Online Sports Complex Booking System 1.0. The connected sources confirm a SQL injection vulnerability in the application, specifically via the parameter in the endpoint path “/classes/master.php?f=delete_ Facility” (untrusted input used in SQL). The vulnerability is rep...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-28962

CVE-2022-28962 affects Online Sports Complex Booking System 1.0. The vulnerability is SQL Injection exploitable via /scbs/classes/Users.php?f=delete_client, with documented exploitation potential and high-severity scores (CVSS v3.1: 9.8, CRITICAL; CVSS v2.0: 7.5, HIGH). Connected sources corrobor...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58672）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ categories/managecategory.php?id=, an attacker can execu...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58669）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=facilities/managefacility&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58674）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletebooking, the id parameter of the pos...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58668）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=clients/manageclient&id= lacks validation of external input SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58677）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. version 1.0 of Online Sports Complex Booking System is vulnerable to SQL injection, which originates in scbs/classes/ Master.php?f=delete, the id parameter of the post request lacks...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58676）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletefacility, the id parameter of the po...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58671）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ bookings/viewbooking.php?id=, an attacker can execute...