2 matches found
CVE-2020-26773: Improper Neutralization of Special Elements used in an SQL Command
Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...
8.8CVSS6.3AI score0.01586EPSS
SaveExploits0References2
PT-2021-11272
Name of the Vulnerable Software and Affected Versions: Restaurant Reservation System version 1.0 Description: The issue allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php. This is an authenticated SQL injection...
8.8CVSS6.3AI score0.01586EPSS
SaveExploits0References5
20