Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Wedding Planner Project records in CISA KEVNo Wedding Planner Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01012 · Published 2022-09-19 · No fix listed CWE-89
Priority HIGH 76
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-09-26 · No fix listed CWE-89
Priority HIGH 76
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01165 · Published 2022-09-26 · No fix listed CWE-89
Priority HIGH 76
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2022-09-26 · No fix listed CWE-89
Priority HIGH 73
Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01341 · Published 2022-10-11 · No fix listed CWE-434
Priority HIGH 73
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01004 · Published 2022-09-26 · No fix listed CWE-89
Priority HIGH 73
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01004 · Published 2022-09-26 · No fix listed CWE-89
Priority HIGH 67
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00998 · Published 2022-09-26 · No fix listed CWE-89
Priority MEDIUM 45
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01529 · Published 2022-10-07 · No fix listed
Priority MEDIUM 43
Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01357 · Published 2022-10-11 · No fix listed CWE-434
Priority MEDIUM 43
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01402 · Published 2022-10-14 · No fix listed CWE-434
Priority MEDIUM 43
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_add.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01288 · Published 2022-10-14 · No fix listed CWE-434
THREATIST.IORead the docs