CVE-2020-28994: Karenderia Multiple Restaurant System Project Karenderia Multiple Restaurant System

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.

Affected products

• Karenderia Multiple Restaurant System Project Karenderia Multiple Restaurant System: up to and including 5.4.2

Published 2020-11-24. Last modified 2026-06-17.