CVE-2022-31986

CVE-2022-31986 applies to Badminton Center Management System v1.0, with a SQL Injection vulnerability in /bcms/admin/?page=reports/daily_court_rental_report&date= (and similar variants). The Red Hat entry corroborates the issue and notes the affected web-access path. Root cause: lack of validatio...