Tornadostore

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tornadostore records in CISA KEV

No Tornadostore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tornadostore 2 records LOW

Records

2 records in Tornadostore · all components

TI-2010-01282 CVE-2010-1327 · GHSA-6g9p-rmjp-2xfr

Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_couri…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-07-06 No fix listed CWE-89

TI-2010-01283 CVE-2010-1328 · GHSA-79wr-q3mh-hggx

Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tipo or (2) destino parameter to login_registrese.php3 in th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01062 Published 2010-07-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0