Product
A SQL injection vulnerability exists in the Insurance-Management-System project due to manipulation of the Plan_no/Name argument in /Admin/View/editPlan.php.