Vendor
Neethuharii CafeManagement contains a remote SQL injection vulnerability in the CafePortalLogin.php login handler, allowing unauthenticated attackers to manipulate the uname argument.