VendorsBadminton Center Management System Projectbadminton_center_management_systemall versions
Vulnerabilities

Badminton Center Management System Project Badminton Center Management System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

22CVEs
CVE-2022-30490
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.
Published 2022-06-01 · Modified
9.8EPSS 0.013
CVE-2022-31993
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.
Published 2022-06-02 · Modified
9.8EPSS 0.011
CVE-2022-31991
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.
Published 2022-06-02 · Modified
9.8EPSS 0.011
CVE-2022-31990
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.
Published 2022-06-02 · Modified
9.8EPSS 0.011
CVE-2022-31989
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.
Published 2022-06-02 · Modified
9.8EPSS 0.011
CVE-2022-30455
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.
Published 2022-05-24 · Modified
9.8EPSS 0.011
CVE-2022-32002
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.
Published 2022-06-02 · Modified
9.8EPSS 0.010
CVE-2022-31996
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31998
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32000
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32001
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32003
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32004
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32006
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31988
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31986
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31985
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31992
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-31994
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.
Published 2022-06-02 · Modified
7.2EPSS 0.010
CVE-2022-32005
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.
Published 2022-06-02 · Modified
7.2EPSS 0.008
CVE-2022-1817
Badminton Center Management System Userlist Module cross site scripting
Published 2022-05-23 · Modified
5.4EPSS 0.006
CVE-2022-30456
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.
Published 2022-05-24 · Modified
5.4EPSS 0.005