22299 matches found
CVE-2022-31994
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...
CVE-2022-31994
Badminton Center Management System v1.0 is affected by a SQL Injection flaw in the admin interface (endpoint: /bcms/admin/?page=sales/view_details&id). The vulnerability stems from unvalidated user input used in SQL statements, enabling unauthorized access to database data. CVSS metrics indicate ...
CVE-2022-31996
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...
CVE-2022-31996
CVE-2022-31996 affects Badminton Center Management System v1.0. It is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=, caused by lack of validation of external SQL statements on that parameter. Documented impacts include high/confidentiality, integrity, and availability con...
CVE-2022-31998
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...
CVE-2022-31998
CVE-2022-31998 : Badminton Center Management System v1.0 is vulnerable to SQL injection via /bcms/admin/?page=service_transactions/view_details&id=. Root cause: lack of input validation on the id parameter. Documented impacts include high confidentiality, integrity, and availability risks (CVSS 3...
CVE-2022-32000
CVE-2022-32000 affects Badminton Center Management System v1.0, where the _bcms/admin/?page=service_transactions/manage_service_transaction&id= parameter is vulnerable to SQL Injection due to unvalidated externally entered SQL statements in the service_transaction function. This can enable an att...
CVE-2022-32001
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...
CVE-2022-32001
CVE-2022-32001 affects Badminton Center Management System v1.0. Connected sources confirm an SQL injection vulnerability in bcms/admin/products/view_product.php?id= (unsanitized input) leading to potential unauthorized database access. The issue is documented across multiple feeds (NVD entry and ...
CVE-2022-32002
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/managecourt.php?id=...
CVE-2022-32002
CVE-2022-32002 affects Badminton Center Management System v1.0, with SQL Injection via /bcms/admin/courts/manage_court.php?id=. The connected documents confirm a SQL injection flaw due to external input not being properly validated, enabling attacker-controlled SQL statements. Impact and exploita...
CVE-2022-32003
The CVE-2022-32003 entry concerns Badminton Center Management System v1.0, which is vulnerable to SQL Injection via the parameter at /bcms/admin/courts/view_court.php?id=. The connected sources explicitly describe an injection flaw that originates from missing validation of the id parameter, enab...
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...
CVE-2022-32004
Summary (CVE-2022-32004) : Badminton Center Management System v1.0 is vulnerable to an SQL injection in bcms/admin/products/manage_product.php?id=. The root cause is lack of input validation/sanitization of the id parameter, enabling an attacker to inject SQL statements. Documented in multiple so...
CVE-2022-32005
CVE-2022-32005 affects Badminton Center Management System v1.0. The vulnerability is a SQL Injection in bcms/admin/services/manage_service.php?id=, caused by lack of validation of externally entered SQL statements. Exploitation details are not provided in the documents; however, this could allow ...
CVE-2022-32005
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...
CVE-2022-32006
CVE-2022-32006 affects Badminton Center Management System v1.0. The vulnerability is an SQL Injection via /bcms/admin/services/view_service.php?id=, attributed to insufficient input validation on that parameter. Impact described in sources includes potential compromise of database data with high ...
CVE-2022-32006
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...
