CVE-2021-45802 - MartDevelopers iResturant 1.0 is vulnerable to SQL Injection

Back Back to CVE browser

CRITICAL

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection

Published Jan 25, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.31%

Description

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://blog.pocas.kr/posts/sqli-iResturant/
x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32520
Advisory
https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://blog.pocas.kr/posts/sqli-iResturant/		x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-32520		Advisory
https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 25, 2022

Updated Aug 4, 2024

Reserved Dec 27, 2021

Link CVE-2021-45802

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-45802

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 25, 2022

Updated Aug 4, 2024

Link EUVD-2021-32520

GitHub

No data