Online Sports Complex Booking System Project

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Online Sports Complex Booking System Project records in CISA KEV

No Online Sports Complex Booking System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Sports Complex Booking System 17 records MEDIUM

Records

17 records

TI-2022-10905 CVE-2022-28093 · GHSA-vpw5-94jh-q7jg

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file…

MEDIUM 46

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01972 Published 2022-04-25 No fix listed

TI-2022-11551 CVE-2022-28962 · GHSA-j85m-6hm4-8243

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.

MEDIUM 45

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01666 Published 2022-05-19 No fix listed CWE-89

TI-2022-12334 CVE-2022-29995 · GHSA-x89j-8f93-rfq4

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12333 CVE-2022-29994 · GHSA-gp7h-34pw-xq4m

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via…

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12332 CVE-2022-29993 · GHSA-j488-p3g6-g6fq

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12331 CVE-2022-29992 · GHSA-qgvv-jpx6-4hx7

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via…

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12330 CVE-2022-29990 · GHSA-8xmf-f2wf-jf5p

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via…

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12329 CVE-2022-29989 · GHSA-825f-v8gm-4f57

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12328 CVE-2022-29988 · GHSA-x3r9-q6h8-pjhf

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12327 CVE-2022-29987 · GHSA-h87x-3gvm-4v3f

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12326 CVE-2022-29986 · GHSA-367p-3wqr-p598

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-12325 CVE-2022-29985 · GHSA-wx4f-6hjp-w5wq

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.

MEDIUM 44

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-05-12 No fix listed CWE-89

TI-2022-10913 CVE-2022-28106 · GHSA-3x6j-h8cp-mc44

Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over…

MEDIUM 44

Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2022-05-20 No fix listed CWE-287

TI-2022-10912 CVE-2022-28105 · GHSA-q4ww-p8r5-7x42

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection…

MEDIUM 44

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-05-20 No fix listed CWE-89

TI-2022-11822 CVE-2022-29304 · GHSA-4xxj-wpww-f4p9

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.

MEDIUM 40

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00822 Published 2022-05-19 No fix listed CWE-89

TI-2022-12079 CVE-2022-29652 · GHSA-mpcj-733c-h3vq

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client.

LOW 29

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2022-05-19 No fix listed CWE-89

TI-2022-10906 CVE-2022-28094 · GHSA-xxh9-gmrj-66fq

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site…

LOW 28

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00694 Published 2022-04-25 No fix listed CWE-79

Open these records in search →