Lucene search
K

864 matches found

Cvelist
Cvelist
added 2024/04/15 12:0 a.m.9 views

CVE-2024-31648

Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...

6.3AI score0.00117EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.0 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System v1.0, which originates from a cross-site scripting vulnerability in the Category Name parameter of the /core/newcategor...

6.1CVSS6.1AI score0.00117EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.2 views

PT-2024-24173 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at "/core/new category2". This enables attackers t...

6.1CVSS6.5AI score0.00117EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/04/15 12:0 a.m.10 views

CVE-2024-31648

Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...

6.3AI score0.00117EPSS
Exploits1References1
NVD
NVD
added 2024/03/28 7:15 p.m.13 views

CVE-2024-31065

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...

6.1CVSS7AI score0.00422EPSS
Exploits1References3
NVD
NVD
added 2024/03/28 7:15 p.m.4 views

CVE-2024-31063

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field...

6.4CVSS7AI score0.00739EPSS
Exploits1References3
NVD
NVD
added 2024/03/28 7:15 p.m.8 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00641EPSS
Exploits1References4
OSV
OSV
added 2024/03/28 7:15 p.m.2 views

CVE-2024-31065

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...

6.1CVSS6.1AI score0.00422EPSS
Exploits1References3
OSV
OSV
added 2024/03/28 7:15 p.m.4 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.1AI score0.00641EPSS
Exploits1References4
OSV
OSV
added 2024/03/28 7:15 p.m.3 views

CVE-2024-31063

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field...

6.4CVSS6.2AI score0.00739EPSS
Exploits1References3
OSV
OSV
added 2024/03/28 7:15 p.m.1 views

CVE-2024-31062

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field...

6.3CVSS6.2AI score0.01566EPSS
Exploits1References3
OSV
OSV
added 2024/03/28 7:15 p.m.3 views

CVE-2024-31061

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...

6.1CVSS6.1AI score0.00422EPSS
Exploits1References3
NVD
NVD
added 2024/03/28 7:15 p.m.7 views

CVE-2024-31061

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...

6.1CVSS7AI score0.00422EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.1 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...

6.1CVSS5.7AI score0.00422EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/03/28 12:0 a.m.9 views

CVE-2024-31065

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...

7.3AI score0.00422EPSS
Exploits1References3
CVE
CVE
added 2024/03/28 12:0 a.m.55 views

CVE-2024-31065

CVE-2024-31065 affects the Insurance Management System (version 1.0.0 and earlier). A Cross-Site Scripting (XSS) flaw in the City input field could allow a remote attacker to execute arbitrary code. Public sources indicate upgrading to a fixed version is recommended (no specific patched version i...

6.1CVSS7.3AI score0.00422EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/28 12:0 a.m.11 views

CVE-2024-31063

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field...

7.3AI score0.00739EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.1 views

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Last Name field...

6.1CVSS5.7AI score0.00422EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/03/28 12:0 a.m.9 views

CVE-2024-31061

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field...

7.5AI score0.00422EPSS
Exploits1References3
CVE
CVE
added 2024/03/28 12:0 a.m.43 views

CVE-2024-31063

CVE-2024-31063 affects Insurance Mangement System v1.0.0 and earlier; a Cross Site Scripting (XSS) flaw in the Email input field allows remote execution of code. Documented impact is Med­ium (CVSS 3.1: 6.4, AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). Root cause is improper handling of input in the Emai...

6.4CVSS7.3AI score0.00739EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder