TornadoStore

ソフト名：TornadoStore 1.4.3
回避策：未対応
脆弱性：SQLインジェクション, XSS, 認証資格情報の奪取
ソース：http://www.bonsai-sec.com/en/research/vulnerabilities/tornadostore-multiple-sql-injection-0106.php
http://www.bonsai-sec.com/en/research/vulnerabilities/tornadostore-multiple-xss-0107.php
http://www.tornadostore.com/
http://www.securityfocus.com/bid/41233
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1327
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1328
CVE：CVE-2010-1327, CVE-2010-1328
危険性：Medium Risk