Lucene search
China National Vulnerability DatabaseCNVD-2022-54291HistoryJun 09, 2022 - 12:00 a.m.
Wedding Management System Arbitrary File Upload Vulnerability (CNVD-2022-54291)
2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wedding management system
arbitrary file upload
validation
uploaded files
photos edit
remote code execution
john paul lim gabule
EPSS
0.001
Percentile
42.9%
Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer. The vulnerability is caused by a lack of validation of the uploaded files in the photos_edit.php page, which could be exploited to upload malicious files and remotely execute arbitrary code.
Related
prion
prion
Privilege escalation
2022-06-02 14:15:00
cvelist
cvelist
CVE-2022-30819
2022-05-31 17:40:25
cve
cve
CVE-2022-30819
2022-06-02 14:15:55
nvd
nvd
CVE-2022-30819
2022-06-02 14:15:55