Lucene search

[email protected]CVE-2021-44091

HistoryJan 20, 2022 - 6:15 p.m.

CVE-2021-44091

2022-01-2018:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve

2021

44091

cross-site scripting

xss

vulnerability

courcecodester

multi restaurant

table reservation system 1.0

fullname

phone

address

parameters

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

22.0%

JSON

A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters.

Affected configurations

NVD

Node

multi_restaurant_table_reservation_system_projectmulti_restaurant_table_reservation_systemMatch1.0

CPENameOperatorVersion
multi_restaurant_table_reservation_system_project:multi_restaurant_table_reservation_systemmulti restaurant table reservation system project multi restaurant table reservation systemeq1.0

CPE	Name	Operator	Version
multi_restaurant_table_reservation_system_project:multi_restaurant_table_reservation_system	multi restaurant table reservation system project multi restaurant table reservation system	eq	1.0

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Multi%20Restaurant%20Table%20Reservation%20System

www.nu11secur1ty.com/2021/11/multi-restaurant-table-reservation.html

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

22.0%

JSON

Related for CVE-2021-44091

nvd1 cvelist1 cnvd1 prion1