CVE-2022-32004

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manageproduct.php?id=...

PT-2022-21019

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/admin/?page=reports/daily court rental report&date= endpoint. This allows for potential manipulation of database queries. No information ...

PT-2022-21031

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/courts/manage court.php" API endpoint, specifically through the id variable. This allows for potential...

PT-2022-21032

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/admin/courts/view court.php endpoint, specifically through the id parameter. This allows for potential manipulation of database queries...

PT-2022-21024

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=court rentals/view court rental&id= endpoint, specifically through the id variable...

CVE-2022-31988: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/dailyservicesreport&date=...

CVE-2022-32005: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manageservice.php?id=...

CVE-2022-31991: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

PT-2022-21018

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /bcms/admin/?page=reports/daily sales report&date= endpoint. The date parameter is vulnerable to SQL injecti...

PT-2022-21027

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the /bcms/admin/?page=sales/manage sale&id= API endpoint, specifically through the id variable. This could potentially lead to unauthorized data...

PT-2022-21035

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/services/view service.php?id=" API endpoint. The id variable is vulnerable to injection attacks...

PT-2022-21023

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete court. This allows for potential manipulation of database...

CVE-2022-31985: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

CVE-2022-31998: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/viewdetails&id=...

CVE-2022-32000: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction&id=...

PT-2022-21033

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "id" parameter in the "/bcms/admin/products/manage product.php" API endpoint. Recommendations For Badminton Center...

CVE-2022-31990: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

PT-2022-21030

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the "id" parameter in the "/bcms/admin/products/view product.php" API endpoint. Recommendations For Badminton Center Managemen...

PT-2022-21020

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the bcms/admin/?page=reports/daily services report&date= endpoint, specifically through the date parameter. Recommendatio...

CVE-2022-32001: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...