DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet . /inc/kiosks.inc script suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication credentials...

CVE-2024-30927: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30926: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component...

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

CVE-2024-30922

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

CVE-2024-30926

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component...

CVE-2024-30928

A SQL Injection vulnerability exists in DerbyNet v9.0 and below . Attackers can execute arbitrary SQL commands by exploiting the 'classids' parameter within the ajax/query.slide.next.inc endpoint. This vulnerability allows for the unauthorized viewing, addition, modification, or deletion of infor...

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

CVE-2024-30923

DerbyNet versions 9.0 and below are vulnerable to a SQL Injection flaw within the print/render/racer.inc component. The root cause is the insufficient sanitization of the where parameter within the URL during Racer Document Rendering. A remote attacker can exploit this to achieve arbitrary code e...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet racerid parameter due to improper validation of user-supplied input by the racer-results.php script. An attacker could use this vulnerability to steal the victim's cookie-based...

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

CVE-2024-30922

A SQL Injection vulnerability exists in DerbyNet v9.0 within the print/render/award.inc script. This flaw occurs in the where Clause during Award Document Rendering , allowing a remote attacker to execute arbitrary code or view, add, modify, or delete information in the back-end database. While n...

CVE-2024-30925

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) flaw in the photo-thumbs.php component. The root cause is the improper validation of user-supplied input, specifically within the racerid parameter. An attacker could exploit this to execute arbitrary code or steal a v...

CVE-2024-30929

DerbyNet versions 9.0 and below are affected by a Cross-Site Scripting (XSS) vulnerability caused by the improper validation of user-supplied input in the playlist.php script. Attackers can exploit the 'back' parameter to execute arbitrary code or steal a victim's cookie-based authentication cred...

CVE-2024-30929: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet racerid parameter due to improper validation of user-supplied input in the photo-thumbs.php script. An attacker could use this vulnerability to steal the victim's cookie-based...