Vulnerabilities

TI-2009-02325 CVE-2009-2437 · GHSA-9f5r-6wg4-cf3w

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password parameters in a login…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01498 Published 2009-07-13 No fix listed CWE-79

TI-2009-02230 CVE-2009-2339 · GHSA-h2wr-499p-hg96

SQL injection vulnerability in index.php in Rentventory allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2009-07-07 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1…

SQL injection vulnerability in index.php in Rentventory allows remote attackers to…