CVE-2021-38699

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

CVE-2021-38699

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

CVE-2021-38699

CVE-2021-38699 affects TastyIgniter 3.0.7 (Laravel PHP) . The vulnerability is a cross-site scripting (XSS) flaw exploitable via multiple endpoints: /account, /reservation, /admin/dashboard, /admin/system_logs . Root cause: lack of input validation/escaping of user-submitted data in those directo...

Exploit for CVE-2021-38817

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remot...

Exploit for Cross-site Scripting in Tastyigniter

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant...

Exploit for Cross-site Scripting in Tastyigniter

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v3.0.7...

Exploit for Cross-site Scripting in Tastyigniter

PoC exploit for CVE-2021-38699. The target product/service is Java, and the vulnerability class/vector is XXE XML External Entity injection. The probable entry point is the XXEinjector.rb script, which is a Ruby script that automates the exploitation of XXE vulnerabilities using direct and out of...