MartDevelopers iResturant SQL Injection Vulnerability (CNVD-2022-91164)

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values are added to the SQL query without any validation. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.