Skip to content
OpenAdvisories
Unscored CVE-2020-29284 EUVD-2020-21659GHSA-9fgh-6w4g-5r53

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter w…

Published Dec 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?table_id= to trigger the vulnerability.

References