CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

CVE-2024-40508

CVE-2024-40508 is an XSS flaw in openPetra v.2023.02 affecting the serverMConference.asmx function. The impact is sensitive information disclosure by a remote attacker, with CVSS v3.1 base score 7.3 (HIGH) and network attack vector, no user interaction required. The root cause is an XSS vulnerabi...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in openPetra version 2023.02, which originates in the serverMConference.asmx function and could allow a remote attacker to obtain sensitive information...

CVE-2024-40506

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which originates in the serverMPersonnel.asmx function and could allow a remote attacker to obtain sensitive information...

CVE-2024-40506

The CVE-2024-40506 entry concerns an OpenPetra vulnerability: Cross Site Scripting in openPetra v.2023.02 affecting the serverMHospitality.asmx function. The root cause is an XSS flaw that could allow a remote attacker to obtain sensitive information. The NVD/CNA metrics indicate network access w...

CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

PT-2024-28886 · Openpetra · Openpetra

Name of the Vulnerable Software and Affected Versions: openPetra version 2023.02 Description: A Cross Site Scripting XSS issue allows a remote attacker to obtain sensitive information. The attacker can exploit this via the "serverMPersonnel.asmx" function. Recommendations: For openPetra version...

PT-2024-28887 · Openpetra · Openpetra

Name of the Vulnerable Software and Affected Versions: openPetra version 2023.02 Description: A Cross Site Scripting XSS issue is present in the software, allowing a remote attacker to obtain sensitive information. The serverMConference.asmx function is affected. Recommendations: For openPetra...

CVE-2024-40507

OpenPetra OpenPetra v2023.02 is affected by a Cross Site Scripting (XSS) vulnerability in serverMPersonnel.asmx that can allow a remote attacker to obtain sensitive information. Affects the web application OpenPetra 2023.02; exploit details indicate the vulnerability resides in the serverMPersonn...

PT-2024-28885 · Openpetra · Openpetra

Name of the Vulnerable Software and Affected Versions: openPetra version 2023.02 Description: A Cross-Site Scripting vulnerability in openPetra allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function. This issue enables the attacker to access confidential...

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in openPetra version 2023.02, which originates in the serverMHospitality.asmx function and could allow a remote attacker to obtain sensitive information...

CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

CVE-2024-40506

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function...

CVE-2024-40508

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function...

CVE-2024-40508

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function...

Exploit for Cross-site Scripting in Openpetra

CVE-2024-40509 Cross Site Scripting vulnerability in openPet...

Cross-site Scripting (XSS) - Stored in openpetra/openpetra

Description Multiple Stored XSS at openpetra 2020.10 Proof of Concept // PoC.req POST /api/serverMSponsorship.asmx/TSponsorshipWebConnectorMaintainChild HTTP/1.1 Host: demo.openpetra.org Cookie: ASP.NETSessionId=AEC44A33068E58B5DE583F3E; OpenPetraSessionID=b987029b-104f-45f1-aa29-339a49d0d55a...