Vulnerabilities (CVE)

Filtered by vendor Iresturant Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43439 1 Iresturant Project 1 Iresturant 2022-07-12 10.0 HIGH 9.8 CRITICAL
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely
CVE-2021-45802 1 Iresturant Project 1 Iresturant 2022-01-28 7.5 HIGH 9.8 CRITICAL
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration.