Tornadostore
Approved changes feed: RSS · Atom
cpe:2.3:a:tornadostore:tornadostore:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tornadostore (db23a48b-823f-5066-95d9-1466d4de415a) |
|---|---|
| Product | Tornadostore (823ac1e1-4322-5dee-99fc-7dbc57aa98bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1328 |
vulnerable | 2026-06-08 04:54:07.230851 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tipo or (2) destino parameter to login_registrese.php3 in the Services section, (3) the rubro parameter to precios.php3 in the Products section, (4) the arti parameter to recomenda_articulo.php3 in the Products section, (5) the descrip parameter in a profile action to control/abm_det.php3 in the e-Commerce section, (6) the tit parameter in a delivery_courier action to control/abm_list.php3 in the e-Commerce section, or (7) the tit parameter in an usuario action to control/abm_det.php3 in the e-Commerce section.
Published: 2010-07-06T14:00:00.000Z
Updated: 2024-08-07T01:21:18.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1327 |
vulnerable | 2026-06-08 04:54:07.230334 |
Details available
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_courier action to control/abm_list.php3.
Published: 2010-07-06T14:00:00.000Z
Updated: 2024-08-07T01:21:19.046Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.