3 matches found
CVE-2022-31990: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deleteproduct...
9.8CVSS8.3AI score0.01124EPSS
SaveExploits1References2
CVE-2022-31991: Improper Neutralization of Special Elements used in an SQL Command
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=deletecourt...
9.8CVSS8.3AI score0.01124EPSS
SaveExploits1References2
CVE-2022-30456: Improper Neutralization of Input During Web Page Generation
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
5.4CVSS6AI score0.00495EPSS
SaveExploits1References2
20