These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
A SQL injection vulnerability was found in the Restaurant-Management-System, affecting an unknown processing of the file User/forgot3.php. The attack can be initiated remotely and has been made public. No version details of affected or updated releases are available due to continuous delivery with rolling releases. The vulnerability allows for remote SQL injection attacks, and defenders should prioritize [truncated]
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper authentication. It is possible to launch the attack remotely. The project was informed of the problem early through an issue r [truncated]
A vulnerability was found in AdithyaYelloju Restaurant Management System. The manipulation of the argument table/members/price results in sql injection. It is possible to launch the attack remotely. The vulnerability affects the admin/add_table.php file, allowing for remote sql injection attacks. Version details for affected and updated releases are unavailable due to the project's rolling release approac [truncated]
A SQL injection vulnerability was found in the Restaurant-Management-System by AdithyaYelloju. The issue affects an unknown functionality in the file admin/add_menu.php, specifically through the manipulation of the item, price, image, and type arguments. This vulnerability can be exploited remotely. The project uses a rolling release model, so no specific version details for affected or updated releases a [truncated]