Vulnerabilities
Vulnerable Software
Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-20
Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-20
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-05-19
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-19
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client.
CVSS Score
6.1
EPSS Score
0.002
Published
2022-05-19
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-12
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-12
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-12
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-12
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-12


Contact Us

Shodan ® - All rights reserved