SQL Injection Vulnerability in AdithyaYelloju Restaurant-Management-System
CVE-2026-103232

6.9MEDIUM

Key Information:

Vendor: Adithyayelloju
Status: Restaurant-management-system
Vendor: CVE Published:; 30 September 2026

🔔 Create Adithyayelloju Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-103232?

A vulnerability has been detected in the AdithyaYelloju Restaurant-Management-System that could be exploited to perform SQL injection attacks through the mysqli_query function in the admin/table_booking.php file. This flaw allows attackers to manipulate input parameters, particularly the argument 'Name', enabling unauthorized access to the database. Remote exploitation can lead to significant security breaches, as attackers may access sensitive information or manipulate data within the database. The issue has been publicly confirmed, yet the vendor's response to the report on this flaw remains unaddressed.

Affected Version(s)

Restaurant-Management-System 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-103232 - Proof of Concept