CVE-2022-29989

CVE-2022-29989 affects Online Sports Complex Booking System 1.0. The vulnerability is SQL Injection via scbs/classes/Master.php?f=delete_booking, due to lack of input validation on the id parameter. This allows unintended SQL commands to be executed and can lead to exposure of sensitive database ...

CVE-2022-29990

CVE-2022-29990 affects Online Sports Complex Booking System 1.0. The vulnerability is a SQL injection in /scbs/admin/categories/view_category.php?id= that enables arbitrary SQL execution and can compromise data confidentiality, integrity, and availability (CVSS3.1: 9.8, HIGH). Connected documents...

CVE-2022-29992

CVE-2022-29992 affects the Online Sports Complex Booking System 1.0. The connected documents describe a SQL injection vulnerability exploitable via the URL path /scbs/admin/categories/manage_category.php?id=, indicating unparameterized queries in that component. They do not provide concrete explo...

CVE-2022-29992

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/managecategory.php?id=...

CVE-2022-29993

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/viewbooking.php?id=...

CVE-2022-29993

The CVE-2022-29993 entry documents an SQL Injection vulnerability in Online Sports Complex Booking System 1.0. Affected component: the web path /scbs/admin/bookings/view_booking.php?id= is vulnerable due to unsanitized input, enabling an attacker to alter or extract database data. CVSS metrics in...

CVE-2022-29994

CVE-2022-29994 affects Online Sports Complex Booking System 1.0. The connected sources confirm a SQL Injection vulnerability in the admin facilities management page, specifically via /scbs/admin/?page=facilities/manage_facility&id=. The vulnerability is triggered through unvalidated external inpu...

CVE-2022-29995

The CVE-2022-29995 entry applies to Online Sports Complex Booking System 1.0 and is caused by SQL injection in the parameter id of the page /scbs/admin/?page=clients/manage_client&id=. The connected docs corroborate a SQL injection vulnerability that can affect confidentiality, integrity, and ava...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=clients/manageclient&id= lacks validation of external input SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ categories/viewcategory.php?id=, an attacker can execute...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ bookings/viewbooking.php?id=, an attacker can execute...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manageuser&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. version 1.0 of Online Sports Complex Booking System is vulnerable to SQL injection, which originates in scbs/classes/ Master.php?f=delete, the id parameter of the post request lacks...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ categories/managecategory.php?id=, an attacker can execu...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletecategory, the id parameter of the po...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletebooking, the id parameter of the pos...

CVE-2022-29317

The CVE-2022-29317 entry concerns Simple Bus Ticket Booking System v1.0. Connected sources confirm SQL injection vulnerabilities in the login flow, specifically via the username and password parameters handled by /assets/partials/_handleLogin.php. The root cause, as described across multiple data...

CVE-2022-28094

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...

Online Sports Complex Booking System 跨站脚本漏洞

Online Sports Complex Booking System is an online sports complex booking system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in version v1.0 of the Online Sports Complex Booking System, which was discovered to contain a cross-site scripting XSS...

WordPress Salon booking system Free and Pro访问控制错误漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Salon booking system Free and Pro has an access control error vulnerability that stems from improper authorizati...