221 matches found
Sql injection
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...
CVE-2022-31989
CVE-2022-31989 affects Badminton Center Management System v1.0. The vulnerability is a SQL injection in /bcms/admin/?page=user/manage_user&id= due to a lack of validation of external SQL statements in that parameter. Root cause: unsafely incorporated user input into SQL. Impact per sources: confi...
CVE-2022-31989
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manageuser&id=...
CVE-2022-31990
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...
CVE-2022-31990
CVE-2022-31990 affects Badminton Center Management System v1.0 and is exploitable via SQL injection in bcms/classes/Master.php?f=delete_product. The Red Hat and CNVD entries corroborate the same description. The vulnerability stems from a flawed SQL query construction in the delete_product path, ...
CVE-2022-31991
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...
CVE-2022-31991
Badminton Center Management System v1.0 contains an SQL injection vulnerability in bcms/classes/Master.php?f=delete_court. The issue arises from insufficient input validation, enabling attackers to manipulate SQL commands and potentially access or exfiltrate sensitive data. Circumstances from mul...
CVE-2022-31992
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...
CVE-2022-31992
The CVE-2022-31992 issue affects Badminton Center Management System v1.0. According to Red Hat and CNVD entries, it is a SQL injection vulnerability exploitable through the parameter id in /bcms/admin/?page=court_rentals/view_court_rental&id= (lack of input validation). The NVD entry confirms the...
CVE-2022-31993
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...
CVE-2022-31993
The CVE-2022-31993 entry concerns Badminton Center Management System v1.0. Affected component: the application’s SQL handling in Master.php (parameter f=delete_service). Root cause: unsanitized external input enabling SQL injection. Impact is described as high/critical in CVSS terms (C/H/I/A all ...
CVE-2022-31994
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...
CVE-2022-31994
Badminton Center Management System v1.0 is affected by a SQL Injection flaw in the admin interface (endpoint: /bcms/admin/?page=sales/view_details&id). The vulnerability stems from unvalidated user input used in SQL statements, enabling unauthorized access to database data. CVSS metrics indicate ...
CVE-2022-31996
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/managesale&id=...
CVE-2022-31996
CVE-2022-31996 affects Badminton Center Management System v1.0. It is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=, caused by lack of validation of external SQL statements on that parameter. Documented impacts include high/confidentiality, integrity, and availability con...
CVE-2022-31998
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...
CVE-2022-31998
CVE-2022-31998 : Badminton Center Management System v1.0 is vulnerable to SQL injection via /bcms/admin/?page=service_transactions/view_details&id=. Root cause: lack of input validation on the id parameter. Documented impacts include high confidentiality, integrity, and availability risks (CVSS 3...
CVE-2022-32000
CVE-2022-32000 affects Badminton Center Management System v1.0, where the _bcms/admin/?page=service_transactions/manage_service_transaction&id= parameter is vulnerable to SQL Injection due to unvalidated externally entered SQL statements in the service_transaction function. This can enable an att...