CVE-2021-45802

9.8 criticalEPSS 1.3%

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

iresturant_project:iresturant

References

https://blog.pocas.kr/posts/sqli-iResturant/
https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md
https://blog.pocas.kr/posts/sqli-iResturant/
https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md

Check your stack JSON