CVE-2022-42034

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-420369.8The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdooCVE-2022-420379.8The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdooCVE-2022-420389.8The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. TheCVE-2022-420399.8The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoCVE-2022-420409.8The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The bCVE-2022-420419.8The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The CVE-2022-420429.8The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The bCVE-2022-420439.8The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoorCVE-2022-420449.8The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdooCVE-2022-420456.7Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28CVE-2022-420467.8wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalationCVE-2022-42057.5In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
CVE-2022-42034: High severity, CVSS 8.8 | Vulnix