What is CVE-2020-28994?

CVE-2020-28994 is a critical-severity vulnerability in Karenderia Multiple Restaurant System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2020-11-24.

How severe is CVE-2020-28994?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Karenderia Multiple Restaurant System Project

CVE-2020-28994

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.

Vulnerability class: SQL Injection

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Karenderia_multiple_restaurant_system_project Karenderia_multiple_restaurant_system
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-28994?: CVE-2020-28994 is a critical-severity vulnerability in Karenderia Multiple Restaurant System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2020-11-24.
How severe is CVE-2020-28994?: Critical severity. CVSS v3 base score is 9.8 out of 10.