CVE-2020-29284

🗓️ 02 Dec 2020 21:08:09Reported by mitreType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 allows unauthenticated SQL Injection

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-29284	3 Dec 202000:55	–	circl
CNNVD	SourceCodester Multi Restaurant Table Reservation System SQL Injection Vulnerability	2 Dec 202000:00	–	cnnvd
Check Point Advisories	SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2021-21916; CVE-2021-21917; CVE-2022-23337; CVE-2022-25149)	26 May 201400:00	–	checkpoint_advisories
Check Point Advisories	Arbitrary Code Injection Over HTTP Traffic (CVE-2020-21176; CVE-2020-25042; CVE-2020-26248; CVE-2020-26712; CVE-2020-28994; CVE-2020-29284; CVE-2020-6308; CVE-2021-25912)	3 Jan 202100:00	–	checkpoint_advisories
Cvelist	CVE-2020-29284	2 Dec 202021:08	–	cvelist
Nuclei	Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection	30 Sep 202217:18	–	nuclei
NVD	CVE-2020-29284	2 Dec 202022:15	–	nvd
Prion	Sql injection	2 Dec 202022:15	–	prion
RedhatCVE	CVE-2020-29284	22 May 202516:36	–	redhatcve

NVD

Node

Source	Link
github	www.github.com/BigTiger2020/-Multi-Restaurant-Table-Reservation-System/blob/main/README.md
exploit-db	www.exploit-db.com/exploits/48984
sourcecodester	www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html

Parameter	Position	Path	Description	CWE
table_id	query param	/dashboard/view-chair-list.php	SQL injection in table_id via GET parameter allows unauthenticated access	CWE-89

21 Nov 2024 05:23Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.21608