CVE-2022-29652 - Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client

MEDIUM

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client

Published May 19, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.83%

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20Booking%20System%201.0%20XSS%20loophole.md		x_refsource_MISCExploitThird Party Advisory
https://packetstormsecurity.com/files/166641/Online-Sports-Complex-Booking-System-1.0-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 19, 2022

Updated Aug 3, 2024

Reserved Apr 25, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a