Monthly Archive: May 2022

Wedding Management System v1.0 is vulnerable to SQL Injection via adminclient_assign.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-3.md

Wedding Management System v1.0 is vulnerable to SQL Injection via adminclient_edit.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-2.md

Wedding Management System v1.0 is vulnerable to SQL Injection via adminblog_events_edit.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-1.md

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-5.md

In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability in the picture upload point of "package_edit.php" file. Date published :...

In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-4.md

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-3.md

Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/SQLi-10.md

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/simple-bus-ticket-booking-system/SQLi-1.md

elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-5.md

elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-3.md

elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-2.md

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/SQLi-1.md

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php. Date published : 2022-05-31 https://github.com/k0xx11/bug_report/blob/main/elitecms-1.01/RCE-1.md