7 matches found
CVE-2024-57494
Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...
Neto E-Commerce CMS 安全漏洞
Neto E-Commerce CMS is an e-commerce content management system from Neto Australia. A security vulnerability exists in Neto E-Commerce CMS versions 6.313.0 through 6.3115, which stems from the presence of cross-site scripting in the kw parameter, which could lead to elevation of privilege...
CVE-2024-57494: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...
PT-2025-40282
Name of the Vulnerable Software and Affected Versions Neto E-Commerce CMS versions 6.313.0 through 6.3115 Description A Cross Site Scripting issue exists in Neto E-Commerce CMS. This allows a remote attacker to potentially escalate privileges. The issue is related to the kw parameter...
CVE-2024-57494
Neto E-Commerce CMS versions 6.313.0 through 6.3115 are affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the kw parameter to potentially escalate privileges . To remediate this issue, users should update to a version later than 6.3115. Exploitation details are...
