PT-2022-12413

Name of the Vulnerable Software and Affected Versions MartDevelopers iResturant version 1.0 Description The issue arises from the lack of verification of the view parameter value when it is added to the SQL query during the viewing of reservations, leading to SQL Injection. Recommendations For...

CVE-2021-45803: Improper Neutralization of Special Elements used in an SQL Command

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation...

MartDevelopers Iresturant SQL注入漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. a SQL injection vulnerability exists in MartDevelopers iResturant v1.0, which stems from adding this when viewing a reservation view...

MartDevelopers Iresturant SQL注入漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values ar...

MartDevelopers KEA-Hotel-ERP 代码问题漏洞

MartDevelopers KEA-Hotel-ERP is an open source lightweight hotel enterprise resource planning system. A security vulnerability exists in MartDevelopers KEA-Hotel-ERP that can be exploited by an attacker to upload PHP files using a file upload vulnerability in the service to exploit a remote code...

PT-2022-12572

Name of the Vulnerable Software and Affected Versions MartDevelopers KEA-Hotel-ERP affected versions not specified Description A remote code execution issue can be exploited by uploading PHP files using a file upload vulnerability in the service. This allows for potential code execution on the...

Cross site scripting

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

PT-2022-11837

Name of the Vulnerable Software and Affected Versions MartDevelopers Inc iResturant version 1.0 Description The issue allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2021-43436: Improper Neutralization of Input During Web Page Generation

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

MartDevelopers Iresturant 跨站脚本漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya, designed to integrate social restaurant operations into a single system. A cross-site scripting vulnerability exists in MartDevelopers Iresturant because the product does not effectively filter...

MartDevelopers Order Processing Mis 跨站脚本漏洞

MartDevelopers Order Processing Mis is a lightweight order processing Mis prototype from MartDevelopers Kenya. A cross-site scripting vulnerability exists in MartDevelopers Order Processing Mis version 1.0, which can be exploited by an attacker to execute malicious HTML code via a registration fo...