CVE-2022-42075

Wedding Planner v1.0 is identified as vulnerable to arbitrary code execution. The provided documents consistently reference the affected software (Wedding Planner v1.0) and confirm RCE as the impact, but do not disclose the underlying root cause, specific vulnerable component/file, exploitation d...

CVE-2022-40402

Wedding Planner v1.0 exposes a SQL injection via the booking parameter on /admin/client_assign.php. Root cause: unsafely constructed SQL statements in user input lead to data disclosure (per multiple sources). Affected component: the booking field in /admin/client_assign.php. CVSS v3.1 base score...

CVE-2022-42229

CVE-2022-42229 affects Wedding Planner v1.0 and enables Arbitrary code execution via the package_edit.php endpoint. The trusted sources describe the vulnerability as an arbitrary code execution risk in the web application, with no additional exploit details provided. Remediation in the related PT...

CVE-2022-38509

Wedding Planner v1.0 contains a SQL injection flaw in the booking_id parameter of /admin/budget.php. Affected component: the web application’s admin budget handling. Root cause: improper input handling allowing SQL injection. Impact per CVSSv3.1: high confidentiality, integrity, and availability ...

CVE-2022-40403

CVE-2022-40403 concerns Wedding Planner v1.0, which has a SQL injection vulnerability in the web endpoint /admin/feature_edit.php where the vulnerable parameter is the id parameter. The underlying root cause is lack of validation of externally entered SQL statements. According to connected source...

CVE-2022-41538

CVE-2022-41538 affects Wedding Planner v1.0. The issue is an arbitrary file upload vulnerability in the /Wedding-Management-PHP/admin/photos_add.php component that can allow an attacker to execute arbitrary PHP code via a crafted file. Reported base metrics indicate a high-severity impact (CVSS v...

CVE-2022-42034

CVE-2022-42034 affects Wedding Planner v1.0, with an arbitrary code execution risk via the file users_profile.php . The vulnerability is described as allowing code execution from that endpoint, leading to a high impact (CVSS 3.1 base 8.8). Exploitation details are not provided in the CVE entry it...

CVE-2022-40404

CVE-2022-40404 affects Wedding Planner v1.0, a web application. A SQL injection vulnerability exists in the /admin/select.php?id= parameter due to missing input validation. This allows attackers to manipulate SQL commands and potentially exfiltrate or corrupt database data. The CVSS metrics indic...

CVE-2022-40485

CVE-2022-40485 concerns Wedding Planner v1.0, where a SQL injection vulnerability exists in /package_detail.php via the id parameter. The root cause is lack of input validation allowing externally entered SQL statements, enabling potentially full data disclosure, modification, and service impact....

CVE-2022-41539

CVE-2022-41539 affects Wedding Planner v1.0, with an arbitrary file upload vulnerability in the /admin/users_add.php component. The flaw enables an attacker to execute arbitrary code via a crafted PHP file. Impact is described as code execution, with high severity (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S...

CVE-2022-40483

CVE-2022-40483 affects Wedding Planner v1.0, where a SQL injection flaw exists in the id parameter of /wedding_details.php. The root cause is lack of input validation against externally entered SQL statements, enabling an attacker to retrieve sensitive database information. The vulnerability is r...

CVE-2022-40484

CVE-2022-40484 – Wedding Planner v1.0 : A SQL injection vulnerability exists in the booking parameter of /admin/client_edit.php. The root cause is lack of validation of externally entered SQL statements, enabling an attacker to disclose sensitive database information. Affected software is explici...