Badminton Center Management System Project vulnerabilities
22 vulnerabilities
Known vulnerabilities in Badminton Center Management System Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Badminton Center Management System22 vulnerabilities
MediumCVE-2022-1817badminton_center_management_system_project · badminton_center_management_system +1 moreBadminton Center Management System Userlist Module cross site scriptingA vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.EPSS0.58%HighCVE-2022-31994badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.EPSS1.01%HighCVE-2022-31992badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.EPSS1.01%CriticalCVE-2022-31993badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.EPSS1.14%CriticalCVE-2022-31990badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.EPSS1.14%HighCVE-2022-31998badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=.EPSS1.02%HighCVE-2022-31996badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.EPSS1.02%HighCVE-2022-31985badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.EPSS1.01%CriticalCVE-2022-31991badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.EPSS1.14%HighCVE-2022-31986badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=.EPSS1.01%CriticalCVE-2022-31989badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.EPSS1.14%HighCVE-2022-31988badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.EPSS1.01%HighCVE-2022-32006badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.EPSS1.02%HighCVE-2022-32005badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.EPSS0.87%HighCVE-2022-32003badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.EPSS1.02%HighCVE-2022-32000badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=.EPSS1.02%HighCVE-2022-32001badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.EPSS1.02%HighCVE-2022-32004badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.EPSS1.02%CriticalCVE-2022-32002badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.EPSS1.00%CriticalCVE-2022-30490badminton_center_management_system_project · badminton_center_management_systembadminton_center_management_system_project badminton_center_management_systemBadminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.EPSS1.32%