3 matches found
Sql injection
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...
6.5CVSS8.9AI score0.0098EPSS
SaveExploits1References1Affected Software1
PT-2022-25368
Name of the Vulnerable Software and Affected Versions Wedding Planner version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/select.php" API endpoint. Recommendations For Wedding Planner version 1.0,...
8.8CVSS0.0098EPSS
SaveExploits1References4
CVE-2022-40404: Improper Neutralization of Special Elements used in an SQL Command
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...
8.8CVSS7.8AI score0.0098EPSS
SaveExploits1References3
20