CVE-2022-31986

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

CVE-2022-31992

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...

CVE-2022-31994

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...

CVE-2022-31988

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

CVE-2022-31991

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

CVE-2022-31986

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

CVE-2022-31993

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

CVE-2022-31992

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...

CVE-2022-31990

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=courtrentals/viewcourtrental&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/viewdetails&id...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailycourtrentalreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manageuser&id=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

CVE-2022-31985

The CVE-2022-31985 entry concerns Badminton Center Management System v1.0, vulnerable to SQL injection through the URL parameter /bcms/admin/?page=reports/daily_sales_report&date=. Root cause is unsafeguarded SQL in the daily_sales_report page (no input validation/extraction). Affected component ...