CVE-2026-103232

Publié : 30 septembre 2026

Modifié : 30 septembre 2026

Score CVSS

7.3

HIGH

Description détaillée

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/AdithyaYelloju/Restaurant-Management-System/https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/8 https://vuldb.com/cve/CVE-2026-103232 https://vuldb.com/submit/955081 https://vuldb.com/vuln/411926 https://vuldb.com/vuln/411926/cti

Dernières Vulnérabilités

CVE-2026-97291

Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

VOIR DÉTAILS

CVE-2026-97290

Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions.

VOIR DÉTAILS

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.

VOIR DÉTAILS