Vulnerabilities
Summary — last 7 days
New vulnerabilities2,713▼ 170 vs. last week
Critical / high1,244▼ 301 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)233▲ 186 vs. last week
18 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.2% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/20/2022 | 6/17/2026 | Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/20/2022 | 6/17/2026 | Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php. | |
| Modified | Medium (6.1) | 0.85% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/19/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client. | |
| Modified | High (8.8) | 0.82% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/19/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility. | |
| Modified | Critical (9.8) | 1.7% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/19/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. | |
| Modified | Critical (9.8) | 1.1% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 5/12/2022 | 6/17/2026 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. | |
| Modified | Medium (6.1) | 0.69% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 4/25/2022 | 7/9/2026 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php. | |
| Modified | Critical (9.8) | 2.0% | — | Online Sports Complex Booking System Project Online Sports Complex Booking System | 4/25/2022 | 7/9/2026 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file. | |
| Modified | Critical (9.8) | 1.2% | — | Online Sports Complex Booking Project Online Sports Complex Booking | 4/5/2022 | 6/17/2026 | Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter. |