Wedding Planner package_detail.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 is vulnerable to a SQL injection vulnerability stemming from a missing validation of external input SQL statements in the id parameter in /package_detail.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.