8 matches found
CVE-2024-40512
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...
CVE-2024-40510
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...
CVE-2024-40512
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...
CVE-2024-40509
OpenPetra 2023.02 is affected by a Cross Site Scripting vulnerability in the serverMFinDev.asmx function. The issue enables an unauthenticated or remote attacker to obtain sensitive information (and, per exploit details, potentially steal cookies) via crafted input in serverMFinDev.asmx. Root cau...
CVE-2024-40512
CVE-2024-40512 affects OpenPetra v2023.02 and is caused by a cross‑site scripting (XSS) vulnerability in the serverMReporting.asmx function. The issue can allow a remote attacker to obtain sensitive information from the server. Affected component: the serverMReporting.asmx endpoint within OpenPet...
CVE-2024-40510
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...