Lucene search
+L

1320 matches found

OSV
OSV
•added 2021/12/20 8:15 p.m.•26 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS6.1AI score0.00686EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/20 8:15 p.m.•16 views

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

6.1CVSS6.1AI score0.03553EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/20 8:15 p.m.•29 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.3CVSS0.01258EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/20 8:15 p.m.•29 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS0.00686EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/20 8:15 p.m.•26 views

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

6.1CVSS0.01439EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/20 8:15 p.m.•31 views

Cross site scripting

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

3.5CVSS5.4AI score0.00686EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/12/20 8:15 p.m.•22 views

Cross site scripting

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

4.3CVSS6.6AI score0.03553EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/12/20 8:15 p.m.•33 views

Design/Logic Flaw

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5CVSS5.7AI score0.01258EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/12/20 7:22 p.m.•4 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS0.00686EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/20 7:22 p.m.•62 views

CVE-2021-43438

The CVE-2021-43438 entry describes a Stored XSS vulnerability in iResturant 1.0, arising from insufficient input sanitization in the signup/registry form. The attack requires injecting hostile content via the NAME and ADDRESS fields, enabling remote code injection as described in the NVD entry. T...

5.4CVSS5.4AI score0.00686EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/20 7:22 p.m.•36 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.6AI score0.00686EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/20 7:11 p.m.•4 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

6.9CVSS0.01258EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/12/20 7:11 p.m.•28 views

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.9AI score0.01258EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/20 7:06 p.m.•4 views

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

10CVSS0.03553EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•6 views

PT-2021-23847

Name of the Vulnerable Software and Affected Versions iOrder version 1.0 Description The issue allows a remote attacker to execute malicious HTML codes via the signup form. This can be achieved by injecting malicious HTML into the form, potentially leading to unauthorized actions or data exposure...

5.3CVSS0.01258EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•5 views

CVE-2021-43438: Improper Neutralization of Input During Web Page Generation

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS5.7AI score0.00686EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•7 views

CVE-2021-43440: Improper Neutralization of Input During Web Page Generation

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...

6.1CVSS6.5AI score0.01439EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•4 views

CVE-2021-43441: Improper Neutralization of Input During Web Page Generation

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...

5.3CVSS6.1AI score0.01258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•6 views

PT-2021-23846

Name of the Vulnerable Software and Affected Versions iOrder version 1.0 Description The issue allows remote attackers to execute arbitrary code via the signup form in the Name and Phone number fields. This is due to multiple stored XSS vulnerabilities in the source code. Recommendations For iOrd...

6.1CVSS0.01439EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•7 views

PT-2021-23844

Name of the Vulnerable Software and Affected Versions iResturant version 1.0 Description The issue allows a remote attacker to inject arbitrary code via the NAME and ADDRESS fields in the signup form, potentially leading to stored XSS attacks. Recommendations For iResturant version 1.0, as a...

5.4CVSS0.00686EPSS
SaveExploits0References6
Rows per page
Query Builder