CVE-2021-45802

2022-01-2512:56:31

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

JSON

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.

References

blog.pocas.kr/posts/sqli-iResturant/

gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md