CVE-2025-11477: SourceCodester Wedding Reservation Management System global.php sql injection

Published Oct 8, 2025

Updated

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Sourcecodester Wedding Reservation Management System

Janobe Wedding Reservation Management System=1.0

Event History

Oct 8, 2025

CVE Published

via MITRE·02:02 PM

Data Sourced

via MITRE·02:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11477?

CVE-2025-11477 has been categorized as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-11477?

To fix CVE-2025-11477, it is recommended to apply input validation and parameterized queries to prevent SQL injection.

What systems are affected by CVE-2025-11477?

CVE-2025-11477 affects SourceCodester Wedding Reservation Management System version 1.0.

Can CVE-2025-11477 be exploited remotely?

Yes, CVE-2025-11477 can be exploited remotely by manipulating user input.

What type of attack does CVE-2025-11477 allow?

CVE-2025-11477 allows attackers to perform SQL injection attacks which can compromise database integrity.