CVE-2014-6619

Restaurant Script PizzaInn_Project 1.0.0 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-6619. PoCs published by Kenneth F. Belva.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Pizza Inn Registration system. The PoC shows how malicious JavaScript can be injected into registration fields and executed when an administrator views the sign-ups.

Description

Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, or (3) login parameter.

Exploits (1)

exploitdb WORKING POC
by Kenneth F. Belva · textwebappsphp
https://www.exploit-db.com/exploits/34760

This exploit demonstrates a stored XSS vulnerability in Pizza Inn Registration system. The PoC shows how malicious JavaScript can be injected into registration fields and executed when an administrator views the sign-ups.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Pizza Inn Registration System (version unspecified)
No auth needed
Prerequisites: access to the registration page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/34760
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/show/osvdb/112019
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/96159

Scores

EPSS 0.0322
EPSS Percentile 86.6%

Details

CWE
CWE-79
Status published
Products (1)
restaurantmis/restaurant_script 1.0.0
Published Sep 30, 2014
Tracked Since Feb 18, 2026