7924 matches found
Sql injection
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40484
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientedit.php...
CVE-2022-40484
CVE-2022-40484 – Wedding Planner v1.0 : A SQL injection vulnerability exists in the booking parameter of /admin/client_edit.php. The root cause is lack of validation of externally entered SQL statements, enabling an attacker to disclose sensitive database information. Affected software is explici...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/clientassign.php...
CVE-2022-40402
Wedding Planner v1.0 exposes a SQL injection via the booking parameter on /admin/client_assign.php. Root cause: unsafely constructed SQL statements in user input lead to data disclosure (per multiple sources). Affected component: the booking field in /admin/client_assign.php. CVSS v3.1 base score...
PT-2022-25366 · Unknown · Wedding Planner
Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking parameter at the "/admin/client assign.php" API endpoint. Recommendations: For Wedding Planner...
Wedding Planner SQL注入漏洞
Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...
CVE-2022-38509
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...
Wedding Planner SQL注入漏洞
Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their weddings through a web application while using real data. A security vulnerability exists in Wedding Planner v1.0, which stems from an SQL injection that can be achieved by a...
PT-2022-24431 · Unknown · Wedding Planner
Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking id parameter at the "/admin/budget.php" API endpoint. Recommendations: For Wedding Planner...
InterContinental Hotels' booking systems disrupted by cyberattack
In a statement filed at the London Stock Exchange, InterContinental Hotels Group PLC reports that parts of the company's technology systems have been subject to unauthorized activity. The activity significantly disrupted IHG's booking channels and other applications. The InterContinental Hotels...
CVE-2022-33177
Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...
CVE-2022-33177
Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...
CVE-2022-33177 WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity
Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...