CVE-2020-28994

9.8 criticalEPSS 1.3%

Critical (9.8) in karenderia multiple restaurant system project karenderia multiple restaurant system. EPSS 1.3% chance of exploitation in the next 30 days.

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-11-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

karenderia_multiple_restaurant_system_project:karenderia_multiple_restaurant_system

References

https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d
https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d

Check your stack JSON