Vulnerabilities > Wedding Planner Project > Wedding Planner > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-10-07 CVE-2022-42075 Unspecified vulnerability in Wedding Planner Project Wedding Planner 1.0
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
network
low complexity
wedding-planner-project
critical
9.8
2022-09-26 CVE-2022-40485 SQL Injection vulnerability in Wedding Planner Project Wedding Planner 1.0
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
network
low complexity
wedding-planner-project CWE-89
critical
9.8
2022-09-26 CVE-2022-40484 SQL Injection vulnerability in Wedding Planner Project Wedding Planner 1.0
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
network
low complexity
wedding-planner-project CWE-89
critical
9.8
2022-09-26 CVE-2022-40483 SQL Injection vulnerability in Wedding Planner Project Wedding Planner 1.0
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
network
low complexity
wedding-planner-project CWE-89
critical
9.8
2022-09-19 CVE-2022-38509 SQL Injection vulnerability in Wedding Planner Project Wedding Planner 1.0
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.
network
low complexity
wedding-planner-project CWE-89
critical
9.8