DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A security vulnerability exists in DerbyNet version v9.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the where clause in the Racer document rendering...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet order parameter due to improper validation of user-supplied input by the checkin.php script. An attacker could use this vulnerability to steal the victim's cookie-based...

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A SQL injection vulnerability exists in the DerbyNet print/render/award.inc script, which can be exploited by an attacker to be able to view, add, modify, or delete information in the back-end database...

CVE-2024-30924

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30924

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component...

CVE-2024-30922

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A cross-site scripting vulnerability exists in the DerbyNet back parameter, which is caused by improper validation of user-supplied input in the playlist.php script. An attacker could use this vulnerability to steal the victim's...

CVE-2024-30921

CVE-2024-30921 affects DerbyNet v9.0 and earlier. A cross-site scripting (XSS) vulnerability in the photo.php component allows a remote attacker to execute arbitrary code via crafted requests/URLs. Exploitation appears possible without authentication (remote vector) and can impact user sessions t...

CVE-2024-30926

DerbyNet, v9.0 and below, is affected by a cross-site scripting (XSS) vulnerability in the ./inc/kiosks.inc component. The root cause is improper sanitization of user-supplied input in URL parameters (notably id and address), allowing remote attackers to inject script and potentially execute arbi...

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30924

DerbyNet v9.0 and earlier are affected by a Cross‑Site Scripting vulnerability in the checkin.php component. The issue arises from improper handling/validation of the order parameter, which is embedded into JavaScript without proper sanitization, allowing an attacker to inject scripts and potenti...

CVE-2024-31818

Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component...

CVE-2024-31818

Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component...

CVE-2024-31818

Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component...

DerbyNet 安全漏洞

DerbyNet is a simple code for a match broadcasting program. A security vulnerability exists in DerbyNet version v.9.0, which stems from a directory traversal vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the page parameter of the kiosk.php component...

PT-2024-24226 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet version 9.0 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the page parameter of the "kiosk.php" component. Recommendations: For DerbyNet version 9.0, consider restricting access to th...

CVE-2024-31818

CVE-2024-31818 is a directory-traversal vulnerability in DerbyNet v9.0 affecting the kiosk.php component via the page parameter, enabling remote code execution. Public descriptions across NVD/Red Hat/CNNVD/CVE listings confirm DerbyNet 9.0 is affected and identify the root cause as directory trav...