CVE-2022-30834

CVE-2022-30834 affects Wedding Management System v1.0. Multiple connected sources confirm a SQL Injection vulnerability in the admin interface, specifically in client_manage_account_details.php when handling booking_id and user_id parameters without proper validation, allowing unauthorized databa...

CVE-2022-30835

Wedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin/budget.php?bookingid=...

CVE-2022-30835

The CVE-2022-30835 entry concerns Wedding Management System v1.0, where the parameter booking_id in /Wedding-Management/admin/budget.php is vulnerable to SQL Injection. The root cause, as described across connected records, is lack of input validation/escaping for external input, enabling attacke...

CVE-2022-30836

Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php...

CVE-2022-30836

CVE-2022-30836 affects Wedding Management System v1.0, where SQL injection is possible through the Wedding-Management/admin/select.php endpoint due to lack of input validation. The connected documents corroborate a SQL injection vulnerability in the same file with consistent affected product/vers...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. version 1.0 of Wedding Management System is vulnerable to a SQL injection vulnerability in /Wedding-Management/package detail.php. The vulnerability is caused by a lack of validation o...

CVE-2022-29656

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29656

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29656

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...

Sql injection

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...

Design/Logic Flaw

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29656

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/packagedetail.php...

CVE-2022-29656

The CVE-2022-29656 entry concerns Wedding Management System v1.0, where a SQL injection vulnerability exists in the id parameter of /Wedding-Management/package_detail.php. The underlying issue is lack of validation of external input in the id parameter, enabling crafted input to manipulate SQL co...

CVE-2022-29655

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29655

The CVE-2022-29655 entry concerns the Wedding Management System v1.0, where the Upload Photos module is vulnerable to arbitrary file upload. The underlying issue is a lack of validation of uploaded files, enabling an attacker to execute arbitrary code via a crafted PHP file. The vulnerability is ...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. version 1.0 of Wedding Management System is vulnerable to a SQL injection vulnerability in /Wedding-Management/package detail.php. The vulnerability is caused by a lack of validation o...

Wedding Management System 代码问题漏洞

The Wedding Management System version 1.0 is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the Upload Photos module. The vulnerability can be exploited by attackers to execute arbitrary code via specially crafted PHP files...