CVE-2022-30832

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientassign.php?booking=31id=...

CVE-2022-30832

creationtimestamp| type| source ---|---|--- 2022-06-02 18:31:50+00:00| seen| https://t.me/cibsecurity/43678...

CVE-2022-30832

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientassign.php?booking=31&userid=...

CVE-2022-30832

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientassign.php?booking=31&userid=...

CVE-2022-30832

Summary: CVE-2022-30832 affects Wedding Management System v1.0 and is caused by a SQL Injection in the admin/client_assign.php endpoint. The vulnerability is triggered via user-controlled inputs in the booking and user_id parameters, due to lack of input validation. The public descriptions indica...