CVE-2021-45803

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.18% chance of exploitation in the next 30 days, 66th percentile

Published

2022-01-25

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-45803

References

• CVE Record
• NVD entry

Related

• CVE-2021-45802
• CVE-2021-45811
• CVE-2021-45793
• CVE-2021-45812
• CVE-2021-45788
• CVE-2021-45814