EUVD-2022-41089

Malicious code in bioql PyPI...

CVE-2022-38509

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

CVE-2022-38509

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the bookingid parameter at /admin/budget.php...

CVE-2022-38509

Wedding Planner v1.0 contains a SQL injection flaw in the booking_id parameter of /admin/budget.php. Affected component: the web application’s admin budget handling. Root cause: improper input handling allowing SQL injection. Impact per CVSSv3.1: high confidentiality, integrity, and availability ...

CVE-2018-20556

CVE-2018-20556 is a SQL injection vulnerability in the WordPress plugin Booking Calendar (version 8.4.3). The flaw allows an attacker to manipulate the booking_id parameter to execute arbitrary SQL commands on the underlying database, potentially exposing data. Multiple connected sources corrobor...