Wedding Management System SQL Injection Vulnerability (CNVD-2022-54290)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/photos_edit.php page’s lack of validation of external An attacker can use this vulnerability to execute illegal SQL commands to steal sensitive database data.