Cpe:2.3:a:mansi_k:restaurant_ims:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amansi_krestaurant_ims/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 25 Oct 2026 04:25:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRestaurant_IMS: SQL injection in lsmodal.php (CVE-2026-115999)https://feed.craftedsignal.io/briefs/2026-10-restaurant-ims-sqli/Sun, 25 Oct 2026 04:25:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-restaurant-ims-sqli/A SQL injection vulnerability exists in the Restaurant_IMS application, where manipulation of the login_id or epsw arguments in the lsmodal.php file leads to SQL injection.A vulnerability has been found in mansi-k Restaurant_IMS commit d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. The function mysqli_connect in lsmodal.php is affected. Manipulation of the login_id or epsw arguments allows for SQL injection. Remote exploitation is possible. The vendor was contacted but did not respond. No version details are provided due to the project's rolling release approach.

]]>highadvisory