A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
📦
wedding_reservation_management_system
Vendor: janobe
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
0
Remote Access
Total CVEs
4
Total Indexed
Avg. EPSS
0.39%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
5.5
CVSS
Severity: MEDIUM
5.5
CVSS
A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Severity: MEDIUM