Wedding Management System SQL Injection Vulnerability (CNVD-2022-54288)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/package_edit.php page that lacks The vulnerability is caused by a lack of validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.