Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-94042— AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

Quick assessment

Affected
AdithyaYelloju Restaurant Management System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 AdithyaYelloju Restaurant Management System 中发现了漏洞，该漏洞影响版本 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c 及更早版本。该漏洞位于文件 中的 函数。通过操纵 、 或 参数，攻击者可实施 SQL 注入攻击。该攻击可远程发起。该漏洞的利用代码已公开，且可能被滥用。由于该产品采用滚动发布（rolling releases）策略以实现持续交付，因此受影响的版本和已修复版本的详细信息不可用。项目组已通过问题报告较早得知该问题，但截

CVSS 6.3 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
AdithyaYelloju Restaurant Management System 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-94042

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/add_table.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
AdithyaYelloju Restaurant Management System 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c cpe:2.3:a:restaurant_management_system:restaurant_management_system:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-94042

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-94042

请登录查看更多情报信息。

Other References for CVE-2026-94042 (1)

IV. Related Vulnerabilities

Same product: Restaurant Management System
Same vendor: AdithyaYelloju
Same weakness: CWE-89

V. Comments for CVE-2026-94042

No comments yet

Leave a comment