CVE-2026-30082

IngEstate Server 软件包列表页面编辑功能中的存储型跨站脚本（XSS）漏洞 受影响版本：IngEstate Server - 11.14.0 受影响功能 受影响 API：PUT /emgui/rest/appDatasheet//?full=true HTTP/1.1 PoC 要利用此存储型跨站脚本（XSS）漏洞，已认证用户必须首先通过仪表盘访问软件包列表页面。编辑功能与 API 端点 /emgui/rest/appDatasheet/ 交互。攻击者随后可将 XSS 载荷注入“关于应用程序”、“新增内容”或“发布说明”参数中。一旦注入成功，恶意 JavaScript...

CVE-2022-30827

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

PT-2023-30657

Name of the Vulnerable Software and Affected Versions pyLoad version 0.5.0 Description The issue allows an authenticated user to upload files to arbitrary locations on the server, potentially leading to command execution by abusing scripts. When creating a new package, a subdirectory is created...

CVE-2022-42229

Wedding Planner v1.0 is vulnerable to Arbitrary code execution via packageedit.php...

Wedding Planner 代码问题漏洞

Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. A code issue vulnerability exists in Wedding Planner v1.0 that stems from easy execution of arbitrary code via...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-30821

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...

CVE-2022-30827

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

CVE-2022-30827

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

Wedding Management System 代码问题漏洞

Wedding Management System v1.0 is an arbitrary file upload vulnerability in the packageedit.php page, which is caused by a lack of validation of the image upload port on the packageedit.php page. The vulnerability is caused by the lack of validation of uploaded files on the packageedit.php page,...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/packageedit.php page that lacks The vulnerability is caused by a lack of validation of...