Iresturant Project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Iresturant Project records in CISA KEV

No Iresturant Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2021-19367 CVE-2021-43439 · GHSA-725x-g63q-9wh5

MEDIUM 48

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03553 Published 2021-12-20 No fix listed CWE-79

TI-2021-20846 CVE-2021-45802 · GHSA-43m3-7v7r-4vh7

MEDIUM 45

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01313 Published 2022-01-25 No fix listed CWE-89

TI-2021-20847 CVE-2021-45803 · GHSA-c453-g432-3m38

MEDIUM 40

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01179 Published 2022-01-25 No fix listed CWE-89

TI-2021-19366 CVE-2021-43438 · GHSA-8frf-j3c5-q2v6

LOW 26

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00686 Published 2021-12-20 No fix listed CWE-79

TI-2021-19364 CVE-2021-43436 · GHSA-m5w7-jx62-72jf

LOW 25

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00613 Published 2022-01-12 No fix listed CWE-79