Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88266
HistorySep 28, 2022 - 12:00 a.m.

Wedding Planner client_edit.php SQL Injection Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wedding planner
sql injection
client_edit.php
sensitive database information
pushpam abhishek

EPSS

0.002

Percentile

54.5%

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 is vulnerable to a SQL injection vulnerability that stems from a missing validation of externally entered SQL statements in the bookings parameter in /admin/client_edit.php. An attacker could exploit the vulnerability to obtain sensitive database information.

EPSS

0.002

Percentile

54.5%

Related for CNVD-2022-88266