Vulnerabilities > Online Sports Complex Booking System Project > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-19	CVE-2022-29652	SQL Injection vulnerability in Online Sports Complex Booking System Project Online Sports Complex Booking System 1.0 Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=save_client. network low complexity online-sports-complex-booking-system-project CWE-89	6.1
2022-04-25	CVE-2022-28094	Cross-site Scripting vulnerability in Online Sports Complex Booking System Project Online Sports Complex Booking System 1.0 SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php. network online-sports-complex-booking-system-project CWE-79	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.