Online Sports Complex Booking System Project
Online Sports Complex Booking System Project Online Sports Complex Booking System: vulnerabilidades y CVE
Online Sports Complex Booking System Project Online Sports Complex Booking System tiene 17 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 14 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE17
Últimos 12 meses0
Críticas14
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-28106 | Crítica (9.8) | 1.2% | — | 20 may 2022 | Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request. |
| CVE-2022-28105 | Crítica (9.8) | 1.1% | — | 20 may 2022 | Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php. |
| CVE-2022-29652 | Media (6.1) | 0.83% | — | 19 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client. |
| CVE-2022-29304 | Alta (8.8) | 0.81% | — | 19 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility. |
| CVE-2022-28962 | Crítica (9.8) | 1.6% | — | 19 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client. |
| CVE-2022-29995 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. |
| CVE-2022-29994 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. |
| CVE-2022-29993 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. |
| CVE-2022-29992 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. |
| CVE-2022-29990 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. |
| CVE-2022-29989 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. |
| CVE-2022-29988 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. |
| CVE-2022-29987 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. |
| CVE-2022-29986 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. |
| CVE-2022-29985 | Crítica (9.8) | 1.1% | — | 12 may 2022 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. |
| CVE-2022-28094 | Media (6.1) | 0.69% | — | 25 abr 2022 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php. |
| CVE-2022-28093 | Crítica (9.8) | 2.0% | — | 25 abr 2022 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file. |