CVE-2014-6619 in Restaurant Script

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, or (3) login parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2014-09-19

Divulgación

2014-09-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
71698	Restaurant Script register-exec.php secuencias de comandos en sitios cruzados	79	Alto	Unavailable	CVE-2014-6619

Fuentes

• MITRE
• NVD
• CVE Details