Security Vulnerabilities - CVEs Published In June 2022
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-06-02
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-06-02
In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-06-02
In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-06-02
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-06-02
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-06-02
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-06-02
Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php.
CVSS Score
7.2
EPSS Score
0.003
Published
2022-06-02