CVE-2021-45802

Name of the Vulnerable Software and Affected Versions MartDevelopers iResturant version 1.0

Description The issue arises from the lack of verification of email and phone parameter values, which are directly added to the SQL query during membership registration, leading to SQL Injection.

Recommendations For MartDevelopers iResturant version 1.0, ensure that the email and phone parameter values are properly verified and sanitized before adding them to the SQL query to prevent SQL Injection. As a temporary workaround, consider implementing input validation for the email and phone parameters to minimize the risk of exploitation.