Wedding Management System Project vulnerabilities
We track 3 vulnerabilities in Wedding Management System Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2022.
3vulnerabilities
1critical
2high
0exploited
8.6average CVSS score
Latest Wedding Management System Project vulnerabilities
- 8.8 High severity
Wedding Management System: Unrestricted Upload of File with Dangerous Type
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.
- 9.8 Critical severity
Wedding Management System: Improper Neutralization of Special Elements used in an SQL Command
Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_detail.php.
- 7.2 High severity
Wedding Management System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.