CVE-2014-6619

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

CVE-2014-6619

CVE-2014-6619 stems from multiple stored XSS flaws in the Pizza Inn Restaurant Script (PizzaInn_Project) 1.0.0. The vulnerable file is register-exec.php, with user-supplied input in fname, lname, or login allowing arbitrary script/HTML execution when an administrator views registrations. The affe...