CVEvulnerability
CVE-2021-45803
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-01-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation.
Affected configurations
• iresturant project iresturant 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://blog.pocas.kr/posts/sqli-iResturant-2/ Broken Link
- https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-45803 Exploit, Third Party Advisory
- https://blog.pocas.kr/posts/sqli-iResturant-2/ Broken Link
- https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-45803 Exploit, Third Party Advisory