CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

SAP GUI 安全漏洞

SAP GUI is an application from SAP, a German company. graphical user interface for SAP systems. A security vulnerability exists in SAP GUI for Java that originates from saving user input on the client PC to improve usability, and an attacker is able to read this data...

PT-2025-3089

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is a Client-Side Injection vulnerability via the last name parameter in the General Information module. This vulnerability can be exploited. Recommendations For MonicaHQ version 4.1.2, as a temporar...

CVE-2024-54999

MonicaHQ v4.1.2 is affected by a Client-Side Injection vulnerability in the General Information module, exploitable via the last_name parameter. The CVE documents indicate low impact to confidentiality and integrity (C:L, I:L) with no availability impact, and no patch/version fix is specified. A ...

CVE-2024-54997

MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54996

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create...

CVE-2024-54997

MonicaHQ v4.1.1 is affected by an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. Root cause: injection in the entry text field that an authenticated user can trigger. Impact: low to moderate confidentiality/integrity risk, with no documente...

PT-2025-3088

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is related to an authenticated Client-Side Injection vulnerability in MonicaHQ. This vulnerability can be exploited via the Reason parameter at the "/people/h:id/debts/create" API endpoint...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2 that stems from the Reason parameter containing authenticated client-side injection...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54996

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

PT-2025-3086

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue concerns multiple authenticated Client-Side Injection vulnerabilities in MonicaHQ. These vulnerabilities occur through the title and description parameters at the "/people/ID/reminders/create" API...

PT-2025-3087

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.1 Description The issue is related to an authenticated Client-Side Injection vulnerability. This vulnerability can be triggered by an authenticated user through the entry text field at the "/journal/entries/ID/edit" API...

CVE-2024-54996

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create...

CVE-2024-54998

MonicaHQ v4.1.2 is affected by an authenticated Client-Side Injection vulnerability via the Reason parameter at the endpoint /people/h:[id]/debts/create. The issue is documented across multiple sources; the root cause is the insecure handling of the Reason parameter in this authenticated API path...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.1 that originates from an entry text field containing authenticated client-side injection...