Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/16 12:00 a.m.•2 views

CVE-2025-6134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:18 a.m.•11 views

CVE-2024-36599

A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...

6.1CVSS5.4AI score0.00299EPSS
SaveExploits3References1
attackerkb
attackerkb
•added 2024/06/14 6:15 p.m.•9 views

CVE-2024-36599

A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...

6.1CVSS5.4AI score0.00299EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2024/06/14 12:00 a.m.•18 views

CVE-2024-36599

A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...

5.5AI score0.00299EPSS
SaveExploits3References2
CVE
CVE
•added 2024/06/14 12:00 a.m.•92 views

CVE-2024-36599

CVE-2024-36599 describes a stored XSS vulnerability in Aegon Life v1.0 where an attacker can inject arbitrary scripts via the name parameter in insertClient.php. Affected software: Aegon Life Life Insurance Management System (v1.0). Root cause: insufficient input validation/output encoding in the...

6.1CVSS5.8AI score0.00299EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•3 views

CVE-2024-36599: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...

6.1CVSS6.6AI score0.00299EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2024/06/13 12:00 a.m.•16 views

PT-2024-27090

Name of the Vulnerable Software and Affected Versions Aegon Life version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at "insertClient.php". Recommendations For Aegon Life version...

6.1CVSS6.2AI score0.00299EPSS
SaveExploits3References8
Rows per page
Query Builder