CVE-2022-31990

CVE-2022-31990 affects Badminton Center Management System v1.0 and is exploitable via SQL injection in bcms/classes/Master.php?f=delete_product. The Red Hat and CNVD entries corroborate the same description. The vulnerability stems from a flawed SQL query construction in the delete_product path, ...