CVE-2025-11477

Summary: CVE-2025-11477 affects SourceCodester Wedding Reservation Management System 1.0. The flaw occurs in /global.php where manipulation of the User parameter enables a SQL injection. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple connected sourc...

CVE-2025-11479

The CVE-2025-11479 affects SourceCodester Wedding Reservation Management System 1.0. The vulnerability is in the insertReservation function of function.php, caused by manipulation of the number argument leading to SQL injection. It can be exploited remotely and exploit details have been publicly ...