What’s Vulnerable › Vulnerabilities

CVE-2020-28994

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-24 · updated 2026-06-17
• Weakness: CWE-89

Description

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.

Affected products

• Karenderia Multiple Restaurant System Project Karenderia Multiple Restaurant System: through 5.4.2

References

• https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d
• https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d

Get alerted when CVE-2020-28994 or the next vulnerability affects your stack