Wedding Planner feature_edit.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 is vulnerable to a SQL injection vulnerability that stems from a missing validation of externally entered SQL statements in the id parameter in /admin/feature_edit.php. An attacker could exploit the vulnerability to obtain sensitive database information.