high8.8Public exploit code
CVE-2023-29849
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bang Resto v1.0 - 'Multiple' SQL Injection2023-04-20 · webapps · php · Verified
Impact
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hockeycomputindo | Bang Resto | Version 1.0 |