PT-2022-21023

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete court. This allows for potential manipulation of database...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

PT-2022-21025

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection via the /bcms/classes/Master.php?f=delete service API endpoint. This allows for potential manipulation of database queries. No information is provided...

CVE-2022-31990: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...

CVE-2022-31991: Improper Neutralization of Special Elements used in an SQL Command

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...

PT-2022-20123

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/bcms/classes/Master.php?f=save court rental" API endpoint. This allows for potential malicious script injection. No informati...

CVE-2022-30456: Improper Neutralization of Input During Web Page Generation

Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...