CVE-2022-31998

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...

CVE-2022-32002

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/managecourt.php?id=...

CVE-2022-31998

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/managecourt.php?id=...

CVE-2022-31989

CVE-2022-31989 affects Badminton Center Management System v1.0. The vulnerability is a SQL injection in /bcms/admin/?page=user/manage_user&id= due to a lack of validation of external SQL statements in that parameter. Root cause: unsafely incorporated user input into SQL. Impact per sources: confi...

CVE-2022-31989

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manageuser&id=...

CVE-2022-31990

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

CVE-2022-31990

CVE-2022-31990 affects Badminton Center Management System v1.0 and is exploitable via SQL injection in bcms/classes/Master.php?f=delete_product. The Red Hat and CNVD entries corroborate the same description. The vulnerability stems from a flawed SQL query construction in the delete_product path, ...

CVE-2022-31991

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

CVE-2022-31991

Badminton Center Management System v1.0 contains an SQL injection vulnerability in bcms/classes/Master.php?f=delete_court. The issue arises from insufficient input validation, enabling attackers to manipulate SQL commands and potentially access or exfiltrate sensitive data. Circumstances from mul...

CVE-2022-31992

The CVE-2022-31992 issue affects Badminton Center Management System v1.0. According to Red Hat and CNVD entries, it is a SQL injection vulnerability exploitable through the parameter id in /bcms/admin/?page=court_rentals/view_court_rental&id= (lack of input validation). The NVD entry confirms the...

CVE-2022-31993

The CVE-2022-31993 entry concerns Badminton Center Management System v1.0. Affected component: the application’s SQL handling in Master.php (parameter f=delete_service). Root cause: unsanitized external input enabling SQL injection. Impact is described as high/critical in CVSS terms (C/H/I/A all ...