EUVD-2022-52632

Malicious code in bioql PyPI...

CVE-2022-30820

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

CVE-2022-30820

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

CVE-2022-30820

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

Privilege escalation

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

CVE-2022-30820

CVE-2022-30820 affects Wedding Management v1.0. The vulnerability is an arbitrary file upload at the picture upload point in users_edit.php, enabling upload of potentially malicious files. CVSS v3.1 base score is 8.8 (HIGH) with network access and no authentication, according to the NVD entry; CV...

CVE-2022-30829

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\usersedit.php...

CVE-2022-30829

CVE-2022-30829 affects Wedding Management System v1.0. A SQL Injection vulnerability exists in admin/users_edit.php due to insufficient input validation, enabling potentially unauthorized access to or manipulation of database data (CVE details show high-severity impact with C/H/I/A = High). Publi...

CVE-2022-30820: Unrestricted Upload of File with Dangerous Type

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...

CVE-2022-30829: Improper Neutralization of Special Elements used in an SQL Command

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\usersedit.php...

Design/Logic Flaw

Kordil EDMS through 2.2.60rc3 allows stored XSS in usersedit.php, usersmanagementedit.php, and usermanagement.php...

CVE-2020-13888: Improper Neutralization of Input During Web Page Generation

Kordil EDMS through 2.2.60rc3 allows stored XSS in usersedit.php, usersmanagementedit.php, and usermanagement.php...

CVE-2015-4119: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the authentication of 1 administrators for requests that create an administrator account via a request to admin/usersedit.php or 2 arbitrary users for requests that conduct SQL...