475 matches found
Wedding Management System SQL注入漏洞
Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer. clientedit.php?booking=31&userid=The page lacks validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive...
Wedding Management System 代码问题漏洞
Wedding Management System v1.0 is an arbitrary file upload vulnerability in the packageedit.php page, which is caused by a lack of validation of the image upload port on the packageedit.php page. The vulnerability is caused by the lack of validation of uploaded files on the packageedit.php page,...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/photosedit.php page's lack of validation of external An attacker can use this...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/logeventsedit.php page Lack of validation of external input SQL statements can be...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/wedding details.php page. details.php page lacks validation of externally entered SQL statements,...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/featureedit.php page that lacks An attacker can use this vulnerability to execute...
Wedding Management System 代码问题漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to arbitrary file uploads, which can be exploited by attackers to upload malicious files and remotely execute arbitrary code...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/packageedit.php page that lacks The vulnerability is caused by a lack of validation of...
Wedding Management System SQL注入漏洞
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/admin/ select.php page lacks validation of externally entered SQL statements,...
CVE-2022-30819
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photosedit.php" file...
CVE-2022-30819
CVE-2022-30819 affects Wedding Management System v1.0, with an arbitrary file upload vulnerability at the photos_edit.php picture upload point. The root cause cited across sources is a lack of validation of uploaded files, enabling attackers to upload malicious files. Associated documents (CNVD/C...
CVE-2022-30820
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersedit.php" file...
CVE-2022-30820
CVE-2022-30820 affects Wedding Management v1.0. The vulnerability is an arbitrary file upload at the picture upload point in users_edit.php, enabling upload of potentially malicious files. CVSS v3.1 base score is 8.8 (HIGH) with network access and no authentication, according to the NVD entry; CV...
CVE-2022-30821
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "packageedit.php" file...
CVE-2022-30821
CVE-2022-30821 affects Wedding Management System v1.0: the Services module’s package_edit.php picture upload point lacks file validation, enabling arbitrary file upload in the background management system. CNVD notes potential remote code execution via this vulnerability; no specific exploit deta...
CVE-2022-30822
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...
CVE-2022-30822
The CVE-2022-30822 entry concerns Wedding Management System v1.0, where an arbitrary file upload vulnerability exists at the picture upload point in users_profile.php. Multiple connected sources describe it as enabling upload of malicious files, with some noting potential remote code execution. T...
CVE-2022-30823
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...
CVE-2022-30823
CVE-2022-30823 affects Wedding Management System v1.0 and is caused by SQL Injection via the admin\blog_events_edit.php entry point. The vulnerability is documented across multiple feeds (NVD, CNVD, RH, etc.) with CVSS v3.1 base score 7.2 (HIGH) and CVSS v2.0 base score 6.5 (MEDIUM); impact inclu...