CVE-2022-31989

CVE-2022-31989 affects Badminton Center Management System v1.0. The vulnerability is a SQL injection in /bcms/admin/?page=user/manage_user&id= due to a lack of validation of external SQL statements in that parameter. Root cause: unsafely incorporated user input into SQL. Impact per sources: confi...

CVE-2022-31994

Badminton Center Management System v1.0 is affected by a SQL Injection flaw in the admin interface (endpoint: /bcms/admin/?page=sales/view_details&id). The vulnerability stems from unvalidated user input used in SQL statements, enabling unauthorized access to database data. CVSS metrics indicate ...

CVE-2022-31998

CVE-2022-31998 : Badminton Center Management System v1.0 is vulnerable to SQL injection via /bcms/admin/?page=service_transactions/view_details&id=. Root cause: lack of input validation on the id parameter. Documented impacts include high confidentiality, integrity, and availability risks (CVSS 3...

CVE-2022-31986

CVE-2022-31986 applies to Badminton Center Management System v1.0, with a SQL Injection vulnerability in /bcms/admin/?page=reports/daily_court_rental_report&date= (and similar variants). The Red Hat entry corroborates the issue and notes the affected web-access path. Root cause: lack of validatio...

CVE-2022-31992

The CVE-2022-31992 issue affects Badminton Center Management System v1.0. According to Red Hat and CNVD entries, it is a SQL injection vulnerability exploitable through the parameter id in /bcms/admin/?page=court_rentals/view_court_rental&id= (lack of input validation). The NVD entry confirms the...

CVE-2022-32001

CVE-2022-32001 affects Badminton Center Management System v1.0. Connected sources confirm an SQL injection vulnerability in bcms/admin/products/view_product.php?id= (unsanitized input) leading to potential unauthorized database access. The issue is documented across multiple feeds (NVD entry and ...

CVE-2022-31990

CVE-2022-31990 affects Badminton Center Management System v1.0 and is exploitable via SQL injection in bcms/classes/Master.php?f=delete_product. The Red Hat and CNVD entries corroborate the same description. The vulnerability stems from a flawed SQL query construction in the delete_product path, ...

CVE-2022-31991

Badminton Center Management System v1.0 contains an SQL injection vulnerability in bcms/classes/Master.php?f=delete_court. The issue arises from insufficient input validation, enabling attackers to manipulate SQL commands and potentially access or exfiltrate sensitive data. Circumstances from mul...

CVE-2022-31993

The CVE-2022-31993 entry concerns Badminton Center Management System v1.0. Affected component: the application’s SQL handling in Master.php (parameter f=delete_service). Root cause: unsanitized external input enabling SQL injection. Impact is described as high/critical in CVSS terms (C/H/I/A all ...

CVE-2022-32005

CVE-2022-32005 affects Badminton Center Management System v1.0. The vulnerability is a SQL Injection in bcms/admin/services/manage_service.php?id=, caused by lack of validation of externally entered SQL statements. Exploitation details are not provided in the documents; however, this could allow ...

CVE-2022-32006

CVE-2022-32006 affects Badminton Center Management System v1.0. The vulnerability is an SQL Injection via /bcms/admin/services/view_service.php?id=, attributed to insufficient input validation on that parameter. Impact described in sources includes potential compromise of database data with high ...

CVE-2022-30456

** CVE-2022-30456 **: Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental. The connected documents confirm an XSS issue but do not provide concrete exploit details, affected versions beyond 1.0, or specific root cause...

CVE-2022-32002

CVE-2022-32002 affects Badminton Center Management System v1.0, with SQL Injection via /bcms/admin/courts/manage_court.php?id=. The connected documents confirm a SQL injection flaw due to external input not being properly validated, enabling attacker-controlled SQL statements. Impact and exploita...

CVE-2022-32003

The CVE-2022-32003 entry concerns Badminton Center Management System v1.0, which is vulnerable to SQL Injection via the parameter at /bcms/admin/courts/view_court.php?id=. The connected sources explicitly describe an injection flaw that originates from missing validation of the id parameter, enab...

CVE-2022-32004

Summary (CVE-2022-32004) : Badminton Center Management System v1.0 is vulnerable to an SQL injection in bcms/admin/products/manage_product.php?id=. The root cause is lack of input validation/sanitization of the id parameter, enabling an attacker to inject SQL statements. Documented in multiple so...

CVE-2022-30490

Badminton Center Management System v1.0 is vulnerable to SQL injection via the id parameter in /bcms/admin/court_rentals/update_status.php. The issue is documented across multiple sources (NVD and regional catalogs). Available connected documents confirm the vulnerability but do not provide a pat...

CVE-2022-32000

CVE-2022-32000 affects Badminton Center Management System v1.0, where the _bcms/admin/?page=service_transactions/manage_service_transaction&id= parameter is vulnerable to SQL Injection due to unvalidated externally entered SQL statements in the service_transaction function. This can enable an att...

CVE-2022-31988

The CVE-2022-31988 entry affects Badminton Center Management System v1.0, with a disclosed SQL Injection vulnerability in bcms/admin/?page=reports/daily_services_report&date= (and variant with ;=). Roots in improper input handling/validation allow attacker-controlled SQL statements to be executed...

CVE-2022-31985

The CVE-2022-31985 entry concerns Badminton Center Management System v1.0, vulnerable to SQL injection through the URL parameter /bcms/admin/?page=reports/daily_sales_report&date=. Root cause is unsafeguarded SQL in the daily_sales_report page (no input validation/extraction). Affected component ...

CVE-2022-31996

CVE-2022-31996 affects Badminton Center Management System v1.0. It is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=, caused by lack of validation of external SQL statements on that parameter. Documented impacts include high/confidentiality, integrity, and availability con...

CVE-2022-30455

CVE-2022-30455 affects Badminton Center Management System 1.0. The vulnerability is a SQL injection in the delete_court_rental path: /bcms/classes/Master.php?f=delete_court_rental, id. Root cause is an injectable parameter in the affected PHP endpoint (no further technical detail provided). Impac...

CVE-2022-1817

CVE-2022-1817 affects the Badminton Center Management System, specifically the userlist module at /bcms/admin/?page=user/list. The vulnerability is an authenticated cross-site scripting (XSS) flaw triggered by manipulating the username parameter with a crafted payload (for example: 1). Exploit de...