CVE-2022-40485

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /packagedetail.php...

CVE-2022-40485

CVE-2022-40485 concerns Wedding Planner v1.0, where a SQL injection vulnerability exists in /package_detail.php via the id parameter. The root cause is lack of input validation allowing externally entered SQL statements, enabling potentially full data disclosure, modification, and service impact....