Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54280
HistoryJun 09, 2022 - 12:00 a.m.

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54280)

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
sql injection
validation lacking
external input
illegal commands
sensitive data theft
cnvd-2022-54280

EPSS

0.001

Percentile

37.7%

Wedding Management System v1.0 contains a SQL injection vulnerability in /Wedding-Management/admin/ budget.php?booking_id=The page lacks validation for external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

Related for CNVD-2022-54280