Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58670）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manageuser&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

CVE-2022-29994

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...

CVE-2022-29995

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manageclient&id=...

CVE-2022-29993

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...

CVE-2022-29986

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...

CVE-2022-29990

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/viewcategory.php?id=...

CVE-2022-29986

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...

CVE-2022-29994

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...

CVE-2022-29992

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/managecategory.php?id=...

CVE-2022-29992

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/managecategory.php?id=...

CVE-2022-29993

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...

CVE-2022-29989

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...

CVE-2022-29985

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletecategory...

CVE-2022-29990

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/viewcategory.php?id=...

CVE-2022-29987

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manageuser&id=...

CVE-2022-29987

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manageuser&id=...

CVE-2022-29995

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manageclient&id=...

CVE-2022-29992

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/managecategory.php?id=...

CVE-2022-29993

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...

CVE-2022-29989

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...