CVE-2024-40511

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function...

CVE-2024-40512

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...

CVE-2024-40511

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function...

CVE-2024-40510

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...

CVE-2024-40510

The CVE-2024-40510 entry concerns a Cross Site Scripting vulnerability in OpenPetra v.2023.02 that allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function. Affected software is OpenPetra (version 2023.02); the underlying issue is a scripting flaw that could ex...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which stems from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the serverMServerAdmin.asmx function...

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

CVE-2024-40512

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...

CVE-2024-40509

OpenPetra 2023.02 is affected by a Cross Site Scripting vulnerability in the serverMFinDev.asmx function. The issue enables an unauthenticated or remote attacker to obtain sensitive information (and, per exploit details, potentially steal cookies) via crafted input in serverMFinDev.asmx. Root cau...

CVE-2024-40512

CVE-2024-40512 affects OpenPetra v2023.02 and is caused by a cross‑site scripting (XSS) vulnerability in the serverMReporting.asmx function. The issue can allow a remote attacker to obtain sensitive information from the server. Affected component: the serverMReporting.asmx endpoint within OpenPet...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which stems from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the serverMFinDev.asmx function...

CVE-2024-40511

CVE-2024-40511 is a Cross Site Scripting vulnerability affecting openPetra v.2023.02. The issue arises in the serverMServerAdmin.asmx function, enabling a remote attacker to obtain sensitive information. Public sources confirm the affected software/version and the vulnerable endpoint, but do not ...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the serverMReporting.asmx function...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which stems from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the serverMCommon.asmx function...

PT-2024-28888

Name of the Vulnerable Software and Affected Versions openPetra version 2023.02 Description The issue allows a remote attacker to obtain sensitive information via the "serverMFinDev.asmx" function. This is a Cross Site Scripting vulnerability. Recommendations For openPetra version 2023.02, consid...

CVE-2024-40511

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function...

CVE-2024-40510

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...

CVE-2024-40511

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function...

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

PT-2024-28891 · Openpetra · Openpetra

Name of the Vulnerable Software and Affected Versions: openPetra version 2023.02 Description: A Cross Site Scripting vulnerability in openPetra allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function. Recommendations: For openPetra version 2023.02, consider...