CVE-2022-29988

creationtimestamp| type| source ---|---|--- 2022-05-12 18:35:52+00:00| seen| https://t.me/cibsecurity/42479...

CVE-2022-29988

CVE-2022-29988 affects Online Sports Complex Booking System 1.0. A SQL injection flaw exists in scbs/classes/Master.php?f=delete due to lack of validation on the id parameter in the POST request, enabling potentially unauthorized SQL commands. Reported impact per sources cites high confidentialit...