Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, or (3) login parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6619
Reference (s):
- EXPLOIT-DB:34760
- URL: http://www.exploit-db.com/exploits/34760
- http://packetstormsecurity.com/files/128337
- OSVDB:112019
- URL: http://osvdb.org/show/osvdb/112019