Priority MEDIUM 44
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_detail.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00936 · Published 2022-05-11 · No fix listed CWE-89
Priority MEDIUM 40
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01174 · Published 2022-05-31 · No fix listed CWE-434
Priority MEDIUM 40
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01174 · Published 2022-05-31 · No fix listed CWE-434
Priority MEDIUM 40
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01174 · Published 2022-05-31 · No fix listed CWE-434
Priority MEDIUM 40
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01174 · Published 2022-05-31 · No fix listed CWE-434
Priority LOW 35
An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01468 · Published 2022-05-11 · No fix listed CWE-434
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0101 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0101 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_manage_account_details.php?booking_id=31&user_id=
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_edit.php?booking=31&user_id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_assign.php?booking=31&user_id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0101 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0101 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
Priority LOW 34
Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01024 · Published 2022-05-31 · No fix listed CWE-89
THREATIST.IORead the docs