Sql injection

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-29652

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=saveclient...

CVE-2022-29652

CVE-2022-29652 affects Online Sports Complex Booking System 1.0, with a SQL Injection flaw in the endpoint /scbs/classes/Users.php?f=save_client. The connected records confirm the issue is a database query manipulation risk due to insufficient input validation/output filtering at that endpoint, p...

CVE-2022-29304

CVE-2022-29304 affects the Online Sports Complex Booking System 1.0. The connected sources confirm a SQL injection vulnerability in the application, specifically via the parameter in the endpoint path “/classes/master.php?f=delete_ Facility” (untrusted input used in SQL). The vulnerability is rep...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-28962

CVE-2022-28962 affects Online Sports Complex Booking System 1.0. The vulnerability is SQL Injection exploitable via /scbs/classes/Users.php?f=delete_client, with documented exploitation potential and high-severity scores (CVSS v3.1: 9.8, CRITICAL; CVSS v2.0: 7.5, HIGH). Connected sources corrobor...

CVE-2022-29449

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

CVE-2022-29449

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

CVE-2022-29449

The CVE-2022-29449 entry concerns the WordPress Opal Hotel Room Booking plugin up to version 1.2.7. The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) flaw in a parameter that is not properly sanitized/escaped, allowing users with contributor+ roles to inject JavaScript that ...

CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

CVE-2022-29449 WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

WordPress plugin Opal Hotel Room Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Opal Hotel Room Booking plugin 1.2.7 and earlier versions contain a cross-site scripting...

PT-2022-19329

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /scbs/classes/Users.php?f=delete client API endpoint. The estimated number of potentially affected devic...

CVE-2022-29652: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=saveclient...

PT-2022-19623 · WordPress · Opal Hotel Room Booking

Name of the Vulnerable Software and Affected Versions: Opal Hotel Room Booking plugin versions prior to 1.2.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher user role can inject malicious...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system from Carlo Montero's personal developer. Online Sports Complex Booking System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-29449: Improper Neutralization of Input During Web Page Generation

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Opal Hotel Room Booking plugin = 1.2.7 at WordPress...

CVE-2022-29304: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-28962: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...