Описание
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.
Ссылки
- Broken Link
- ExploitThird Party Advisory
- Broken Link
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:iresturant_project:iresturant:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.01313
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 4 лет назад
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.
EPSS
Процентиль: 69%
0.01313
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89