CVE-2022-30829

CVE-2022-30829 affects Wedding Management System v1.0. A SQL Injection vulnerability exists in admin/users_edit.php due to insufficient input validation, enabling potentially unauthorized access to or manipulation of database data (CVE details show high-severity impact with C/H/I/A = High). Publi...

CVE-2022-30823

CVE-2022-30823 affects Wedding Management System v1.0 and is caused by SQL Injection via the admin\blog_events_edit.php entry point. The vulnerability is documented across multiple feeds (NVD, CNVD, RH, etc.) with CVSS v3.1 base score 7.2 (HIGH) and CVSS v2.0 base score 6.5 (MEDIUM); impact inclu...

CVE-2022-30826

CVE-2022-30826 affects Wedding Management System v1.0. The vulnerability is a SQL injection that originates from the admin\client_assign.php page. The available documents consistently identify the vulnerable component as the admin client assignment flow, but none provide concrete details on affec...

CVE-2022-30827

CVE-2022-30827 affects Wedding Management System v1.0. The vulnerability is a SQL Injection in the admin/package_edit.php entry point caused by unsanitized external input. Impact details in sources indicate potential unauthorized access to sensitive data (C onfidentiality/Integrity/Availability r...

CVE-2022-29655

The CVE-2022-29655 entry concerns the Wedding Management System v1.0, where the Upload Photos module is vulnerable to arbitrary file upload. The underlying issue is a lack of validation of uploaded files, enabling an attacker to execute arbitrary code via a crafted PHP file. The vulnerability is ...

CVE-2022-30818

Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31 due to lack of input validation in the blog_events_edit.php page. The issue (CVE-2022-30818) can allow an attacker to manipulate SQL queries and potentially access or exfiltrate ...

CVE-2022-29656

The CVE-2022-29656 entry concerns Wedding Management System v1.0, where a SQL injection vulnerability exists in the id parameter of /Wedding-Management/package_detail.php. The underlying issue is lack of validation of external input in the id parameter, enabling crafted input to manipulate SQL co...

CVE-2022-30828

CVE-2022-30828 affects Wedding Management System v1.0. All connected sources describe a SQL Injection vulnerability originating from admin/photos_edit.php, caused by insufficient input validation. Reported impacts include the ability to execute unauthorized SQL commands and exfiltrate data. The C...

CVE-2022-30833

Wedding Management System v1.0 is vulnerable to SQL Injection in admin/client_edit.php?booking=31&user_id= (no input validation). Root cause: unsanitized external input leading to SQL statements being manipulated. Documented in multiple sources (CNVD/CNNVD, Red Hat, NVD) with explicit payload pat...

CVE-2022-30834

CVE-2022-30834 affects Wedding Management System v1.0. Multiple connected sources confirm a SQL Injection vulnerability in the admin interface, specifically in client_manage_account_details.php when handling booking_id and user_id parameters without proper validation, allowing unauthorized databa...

CVE-2022-30820

CVE-2022-30820 affects Wedding Management v1.0. The vulnerability is an arbitrary file upload at the picture upload point in users_edit.php, enabling upload of potentially malicious files. CVSS v3.1 base score is 8.8 (HIGH) with network access and no authentication, according to the NVD entry; CV...

CVE-2022-30821

CVE-2022-30821 affects Wedding Management System v1.0: the Services module’s package_edit.php picture upload point lacks file validation, enabling arbitrary file upload in the background management system. CNVD notes potential remote code execution via this vulnerability; no specific exploit deta...

CVE-2022-30825

Wedding Management System v1.0 is vulnerable to SQL Injection via admin/client_edit.php. Root cause: lack of validation of external SQL statements on that page. Documents indicate the vulnerability (CVE-2022-30825) with impact that includes partial confidentiality/integrity and partial availabili...

CVE-2022-30830

CVE-2022-30830 affects Wedding Management System v1.0. SQL injection via admin\feature_edit.php allows arbitrary SQL execution, potentially exposing/storing data. CVSSv3.1 base score 7.2 (HIGH): Network, low attack complexity, privileges required HIGH, no user interaction, with Confidentiality/In...

CVE-2022-30819

CVE-2022-30819 affects Wedding Management System v1.0, with an arbitrary file upload vulnerability at the photos_edit.php picture upload point. The root cause cited across sources is a lack of validation of uploaded files, enabling attackers to upload malicious files. Associated documents (CNVD/C...

CVE-2022-30822

The CVE-2022-30822 entry concerns Wedding Management System v1.0, where an arbitrary file upload vulnerability exists at the picture upload point in users_profile.php. Multiple connected sources describe it as enabling upload of malicious files, with some noting potential remote code execution. T...

CVE-2022-30831

CVE-2022-30831 affects Wedding Management System v1.0, with the vulnerability located in the Wedding-Management/wedding_details.php component. The issue is an SQL Injection caused by lack of validation of externally entered SQL statements, enabling an attacker to manipulate queries and potentiall...

CVE-2022-30835

The CVE-2022-30835 entry concerns Wedding Management System v1.0, where the parameter booking_id in /Wedding-Management/admin/budget.php is vulnerable to SQL Injection. The root cause, as described across connected records, is lack of input validation/escaping for external input, enabling attacke...

CVE-2022-30832

Summary: CVE-2022-30832 affects Wedding Management System v1.0 and is caused by a SQL Injection in the admin/client_assign.php endpoint. The vulnerability is triggered via user-controlled inputs in the booking and user_id parameters, due to lack of input validation. The public descriptions indica...

CVE-2022-30836

CVE-2022-30836 affects Wedding Management System v1.0, where SQL injection is possible through the Wedding-Management/admin/select.php endpoint due to lack of input validation. The connected documents corroborate a SQL injection vulnerability in the same file with consistent affected product/vers...