Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. version 1.0 of Wedding Management System is vulnerable to a SQL injection vulnerability in /Wedding-Management/package_ detail.php. The vulnerability is caused by a lack of validation of external input SQL statements in the id parameter of /Wedding-Management/package_ detail.php, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.