Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
CWE-434, CWE-434