CVE-2023-7100: A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The ma...

Summary

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The manipulation of the argument fdate/tdate leads to sql injection. It is possible to launch the attack remo...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
phpgurukul	restaurant_table_booking_system	1.0 `cpe:2.3:a:phpgurukul:restaurant_table_booking_system:1.0:::::::*`

Original advisory text

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The ma...

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The manipulation of the argument fdate/tdate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References

https://phpgurukul.com/
https://vuldb.com/?submit.256861
https://medium.com/@2839549219ljk/restaurant-table-booking-system-sql-injection-... Exploit Third Party Advisory
https://vuldb.com/?ctiid.248952 Permissions Required Third Party Advisory
https://vuldb.com/?id.248952 Third Party Advisory