Vulnerabilities

TI-2010-01283 CVE-2010-1328 · GHSA-79wr-q3mh-hggx

Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tipo or (2) destino parameter to login_registrese.php3 in th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01062 Published 2010-07-06 No fix listed CWE-79

TI-2010-01282 CVE-2010-1327 · GHSA-6g9p-rmjp-2xfr

Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_couri…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-07-06 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier…

Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote…