---
id: CVE-2025-11479
title: >-
  A security vulnerability has been detected in SourceCodester Wedding
  Reservation Management System 1.0
summary: >-
  A security vulnerability has been detected in SourceCodester Wedding
  Reservation Management System 1.0. Impacted is the function insertReservation
  of the file function.php. Such manipulation of the argument number leads to
  sql injection.…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-74
  - CWE-89
  - CWE-89
vendor: janobe
product: wedding_reservation_management_system
affected:
  - wedding_reservation_management_system = 1.0
published: '2025-10-08'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11479'
references:
  - url: 'https://github.com/DrNbnonono/CVE/issues/7'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.327597'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.327597'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.667388'
    label: cna@vuldb.com
  - url: 'https://www.sourcecodester.com/'
    label: cna@vuldb.com
tags:
  - nvd
epss: 0.00421
epssPercentile: 0.34346
ingestedAt: '2026-10-08T13:42:55.007Z'
---

## Overview

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

## Affected

- `wedding_reservation_management_system = 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.