CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-19

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Online Sports Complex Booking System (Online Sports Complex Booking System Project)

References

• https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20B…
• https://packetstormsecurity.com/files/166598/Online-Sports-Complex-Booking-System-1.0-SQL-Injection.html