221 matches found
CVE-2022-31985
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...
CVE-2022-31986
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...
CVE-2022-31986
CVE-2022-31986 applies to Badminton Center Management System v1.0, with a SQL Injection vulnerability in /bcms/admin/?page=reports/daily_court_rental_report&date= (and similar variants). The Red Hat entry corroborates the issue and notes the affected web-access path. Root cause: lack of validatio...
CVE-2022-31988
The CVE-2022-31988 entry affects Badminton Center Management System v1.0, with a disclosed SQL Injection vulnerability in bcms/admin/?page=reports/daily_services_report&date= (and variant with ;=). Roots in improper input handling/validation allow attacker-controlled SQL statements to be executed...
CVE-2022-31988
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...
CVE-2022-32004
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...
CVE-2022-32001
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...
CVE-2022-32002
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/managecourt.php?id=...
CVE-2022-32006
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/viewservice.php?id=...
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...
CVE-2022-31996
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...
CVE-2022-32004
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...
CVE-2022-32000
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction&id=...
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/viewcourt.php?id=...
CVE-2022-31996
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...
CVE-2022-32000
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction&id=...
CVE-2022-32005
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...
CVE-2022-32005
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...