Wedding Management System SQL Injection Vulnerability (CNVD-2022-54296)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/wedding_ details.php page. details.php page lacks validation of externally entered SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.