CVE-2022-29989

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletebooking...

CVE-2022-29989

creationtimestamp| type| source ---|---|--- 2022-05-12 18:35:44+00:00| seen| https://t.me/cibsecurity/42473...

CVE-2022-29989

CVE-2022-29989 affects Online Sports Complex Booking System 1.0. The vulnerability is SQL Injection via scbs/classes/Master.php?f=delete_booking, due to lack of input validation on the id parameter. This allows unintended SQL commands to be executed and can lead to exposure of sensitive database ...