Badminton Center Management System Project
Badminton Center Management System Project Badminton Center Management System: vulnerabilidades y CVE
Badminton Center Management System Project Badminton Center Management System tiene 22 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 7 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE22
Últimos 12 meses0
Críticas7
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-31994 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id. |
| CVE-2022-31993 | Crítica (9.8) | 1.1% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service. |
| CVE-2022-31992 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=. |
| CVE-2022-31991 | Crítica (9.8) | 1.1% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court. |
| CVE-2022-31990 | Crítica (9.8) | 1.1% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product. |
| CVE-2022-31989 | Crítica (9.8) | 1.1% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=. |
| CVE-2022-31988 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=. |
| CVE-2022-31986 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=. |
| CVE-2022-31985 | Alta (7.2) | 1.00% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=. |
| CVE-2022-32006 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=. |
| CVE-2022-32005 | Alta (7.2) | 0.86% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=. |
| CVE-2022-32004 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=. |
| CVE-2022-32003 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=. |
| CVE-2022-32002 | Crítica (9.8) | 0.99% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=. |
| CVE-2022-32001 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=. |
| CVE-2022-32000 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=. |
| CVE-2022-31998 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=. |
| CVE-2022-31996 | Alta (7.2) | 1.0% | — | 2 jun 2022 | Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=. |
| CVE-2022-30490 | Crítica (9.8) | 1.3% | — | 2 jun 2022 | Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php. |
| CVE-2022-30456 | Media (5.4) | 0.50% | — | 24 may 2022 | Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental. |
| CVE-2022-30455 | Crítica (9.8) | 1.1% | — | 24 may 2022 | Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id. |
| CVE-2022-1817 | Media (5.4) | 0.57% | — | 23 may 2022 | A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the… |