Priority MEDIUM 45
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01316 · Published 2022-06-01 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01005 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 44
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01096 · Published 2022-05-24 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 33
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00871 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 25
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00503 · Published 2022-05-24 · No fix listed CWE-79
Priority LOW 25
A vulnerability, which was classified as problematic, was found in Badminton Center Management System.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00583 · Published 2022-05-23 · No fix listed CWE-79
THREATIST.IORead the docs