Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
Inoutscripts records in CISA KEVNo Inoutscripts vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01086 · Published 2022-05-23 · No fix listed CWE-89
Priority LOW 35
Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01086 · Published 2022-05-23 · No fix listed CWE-89
Priority LOW 35
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01226 · Published 2022-05-23 · No fix listed CWE-89
Priority LOW 25
Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00581 · Published 2022-07-26 · No fix listed CWE-79
Open these records in search →