ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

The ReDi Restaurant Reservations plugin provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to ma...

redi-group.com XSS vulnerability

Open Bug Bounty ID: OBB-576016 Description| Value ---|--- Affected Website:| redi-group.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Password stored in clear text vulnerability in real time stock trading program

Company: REDIProducts, a division of Spear, Leeds and Kellogg Program: REDI.exe Background: REDI is a real time stock trading software used by active traders to execute stock orders very rapidly. From their web site www.redi.com bullet points of REDI include; "Optimal execution, immediate access ...

Проблемы в Redi &#40;cleartext password&#41;

Пароль в текстовом виде попадает в открытый log-файл...