CVE-2026-94042

MEDIUM 6.3

AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/add_table.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-89 CWE-74
Vendor	adithyayelloju
Product	restaurant management system
Published	Sep 20, 2026

Stay Ahead of the Next One

Get instant alerts for adithyayelloju restaurant management system

Be the first to know when new medium vulnerabilities affecting adithyayelloju restaurant management system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

AdithyaYelloju / Restaurant Management System

7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/407971 vuldb.com: https://vuldb.com/vuln/407971/cti vuldb.com: https://vuldb.com/cve/CVE-2026-94042 vuldb.com: https://vuldb.com/submit/948799 github.com: https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/3

Credits

🔍 mangguoli (VulDB User) VulDB CNA Team