PT-2022-12412
CVE-2021-45802
·
تاريخ النشر
2022-01-25
·
تاريخ التحديث
2022-01-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MartDevelopers iResturant version 1.0
Description
The issue arises from the lack of verification of
email and phone parameter values, which are directly added to the SQL query during membership registration, leading to SQL Injection.Recommendations
For MartDevelopers iResturant version 1.0, ensure that the
email and phone parameter values are properly verified and sanitized before adding them to the SQL query to prevent SQL Injection. As a temporary workaround, consider implementing input validation for the email and phone parameters to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾