Wedding Management System vulnerabilities

3 known vulnerabilities in Wedding Management System from Wedding Management System Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Wedding Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-30821Jun 2, 2022Wedding Management System ProjectEPSS 1.17%

  In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.

• 9.8 Critical severity

  Wedding Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-29656May 11, 2022Wedding Management System Project

  Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_detail.php.

• 7.2 High severity

  Wedding Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-29655May 11, 2022Wedding Management System ProjectEPSS 1.47%

  An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.