CVE-2022-30490

CriticalCVSS 9.8

Published: 02/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.22%

65th percentile - higher than 65% of all known CVEs

Summary

Badminton Center Management System V1.0 is vulnerable to SQL Injection via the 'id' parameter in /bcms/admin/court_rentals/update_status.php. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential unauthorized access, modification, or deletion of data, compromising the confidentiality and integrity of the system.

Recommendation

Immediately update the system to the latest version or apply a security patch that filters and validates input data for the 'id' parameter.

Original NVD description (English source)

Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.