CVE-2024-7124

CVE-2024-7124 DInGO dLibra バージョン6.0から6.3.20における反射型XSS DInGO dLibraソフトウェアのエンドポイント'indexsearch'のパラメータ'filter'における、Webページ生成時の入力の不適切な無効化の脆弱性により、反射型クロスサイトスクリプティング（XSS）が可能になります。攻撃者は、細工されたURLを使用するよう誰かを騙し、その結果ユーザーのブラウザでスクリプトが実行される可能性があります。この問題は、バージョン6.0から6.3.20未満のDInGO dLibraソフトウェアに影響します。 PoC...

EUVD-2024-48102

Malicious code in bioql PyPI...

CVE-2024-7124

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in...

CVE-2024-7124

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in...

CVE-2024-7124

CVE-2024-7124 affects DInGO dLibra software (versions 6.0–6.3.19). The vulnerability is a Reflected Cross-Site Scripting (XSS) in the indexsearch endpoint’s filter parameter, caused by improper neutralization of input during web page generation. Exploitation would require a user to click a crafte...

CVE-2024-7124 Reflected XSS in DInGO dLibra

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in...

CVE-2024-7124 Reflected XSS in DInGO dLibra

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in...

DInGO dLibra 跨站脚本漏洞

DInGO dLibra is a digital library system from DInGO, Inc. A cross-site scripting vulnerability exists in DInGO dLibra versions 6.0 through prior to 6.3.20, which stems from the presence of Reflective Cross-Site Scripting XSS, where an attacker may be able to use a crafted URL to cause the script ...

muzeumcyfrowe.pl Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting muzeumcyfrowe.pl website and its users. Following...