CVE-2020-28994

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.29% chance of exploitation in the next 30 days, 68th percentile

Published

2020-11-24

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d

References

• CVE Record
• NVD entry

Related

• CVE-2020-28993
• CVE-2020-29007
• CVE-2020-28978
• CVE-2020-29047
• CVE-2020-28977
• CVE-2020-29053