Vulnerabilities

TI-2022-15743 CVE-2022-34988 · GHSA-6phw-cwr4-6vjp

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting…

LOW 25

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00581 Published 2022-07-26 No fix listed CWE-79

TI-2022-13413 CVE-2022-31487 · GHSA-2gvh-7c9c-xgq4

LOW 35

Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2022-05-23 No fix listed CWE-89

TI-2022-13414 CVE-2022-31488 · GHSA-wx7w-x95x-c7gm

LOW 35

Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2022-05-23 No fix listed CWE-89

TI-2022-13415 CVE-2022-31489 · GHSA-326g-xf83-pf2m

LOW 35

Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2022-05-23 No fix listed CWE-89