Pushpam02
Products
2- 5 CVEs
- 3 CVEs
Recent CVEs
8| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-42075 | Cri | 0.64 | 9.8 | 0.01 | Oct 7, 2022 | Wedding Planner v1.0 is vulnerable to arbitrary code execution. | ||
| CVE-2022-40485 | Cri | 0.64 | 9.8 | 0.01 | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php. | ||
| CVE-2022-40484 | Cri | 0.64 | 9.8 | 0.01 | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php. | ||
| CVE-2022-40483 | Cri | 0.64 | 9.8 | 0.01 | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php. | ||
| CVE-2022-41539 | Hig | 0.57 | 8.8 | 0.01 | Oct 14, 2022 | Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | ||
| CVE-2022-40932 | Hig | 0.47 | 7.2 | 0.01 | Sep 22, 2022 | In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system. | ||
| CVE-2026-30526 | Med | 0.40 | 6.1 | 0.00 | Apr 1, 2026 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without… | ||
| CVE-2025-7408 | Low | 0.23 | 3.5 | 0.00 | Jul 10, 2025 | A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/templates/animal_form_template.php. The manipulation of the argument msg leads to cross site scripting. The attack… |
- risk 0.64cvss 9.8epss 0.01
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
- risk 0.64cvss 9.8epss 0.01
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
- risk 0.64cvss 9.8epss 0.01
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
- risk 0.64cvss 9.8epss 0.01
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
- risk 0.57cvss 8.8epss 0.01
Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- risk 0.47cvss 7.2epss 0.01
In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
- risk 0.40cvss 6.1epss 0.00
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without…
- risk 0.23cvss 3.5epss 0.00
A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/templates/animal_form_template.php. The manipulation of the argument msg leads to cross site scripting. The attack…