Wedding Management System v1.0 is vulnerable to SQL Injection via adminclient_assign.php.
CVE-2022-30825
Wedding Management System v1.0 is vulnerable to SQL Injection via adminclient_edit.php.
CVE-2022-30823
Wedding Management System v1.0 is vulnerable to SQL Injection via adminblog_events_edit.php.
CVE-2022-30822
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of “users_profile.php” file.
CVE-2022-30821
In Wedding Management System v1.0, the editing function of the “Services” module in the background management system has an arbitrary file upload vulnerability in the picture upload point of “package_edit.php” file.
CVE-2022-30820
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of “users_edit.php” file.
