PT-2022-11982 · Sourcecodester · Sourcecodester Multi Restaurant Table Reservation System

Published 2022-01-20 · Updated 2022-01-25 · CVE-2021-44091

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Courcecodester Multi Restaurant Table Reservation System version 1.0

Description A Cross-Site Scripting (XSS) issue exists in the register.php file via the fullname, phone, and address parameters. This allows for potential malicious script execution.

Recommendations For Courcecodester Multi Restaurant Table Reservation System version 1.0, consider validating and sanitizing user input for the fullname, phone, and address parameters in the register.php file to prevent XSS attacks. As a temporary workaround, restrict access to the register.php file until a proper fix is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-44091

Affected Products

Sourcecodester Multi Restaurant Table Reservation System

References · 5

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Multi%20Restaurant%20Table%20Reservation%20System · Exploit
• 🔥 https://nu11secur1ty.com/2021/11/multi-restaurant-table-reservation.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44091 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44091 · Vendor Advisory
• https://t.me/cibsecurity/35938 · Telegram Post