CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

CVE-2024-30929

DerbyNet versions 9.0 and below are affected by a Cross-Site Scripting (XSS) vulnerability caused by the improper validation of user-supplied input in the playlist.php script. Attackers can exploit the 'back' parameter to execute arbitrary code or steal a victim's cookie-based authentication cred...