CVE-2022-31986

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

CVE-2022-31993

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

CVE-2022-31992

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...

CVE-2022-31993

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manageuser&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

CVE-2022-31985

The CVE-2022-31985 entry concerns Badminton Center Management System v1.0, vulnerable to SQL injection through the URL parameter /bcms/admin/?page=reports/daily_sales_report&date=. Root cause is unsafeguarded SQL in the daily_sales_report page (no input validation/extraction). Affected component ...

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

CVE-2022-31986

CVE-2022-31986 applies to Badminton Center Management System v1.0, with a SQL Injection vulnerability in /bcms/admin/?page=reports/daily_court_rental_report&date= (and similar variants). The Red Hat entry corroborates the issue and notes the affected web-access path. Root cause: lack of validatio...

CVE-2022-31986

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

CVE-2022-31988

The CVE-2022-31988 entry affects Badminton Center Management System v1.0, with a disclosed SQL Injection vulnerability in bcms/admin/?page=reports/daily_services_report&date= (and variant with ;=). Roots in improper input handling/validation allow attacker-controlled SQL statements to be executed...

CVE-2022-31988

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

CVE-2022-32004

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

CVE-2022-32001

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...