CVE-2021-45802

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-01-25

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Iresturant (Iresturant Project)

References

• https://blog.pocas.kr/posts/sqli-iResturant/
• https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md