CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Summary (CVE-2024-30925): DerbyNet versions 9.0 and below contain a Cross Site Scripting vulnerability in the photo-thumbs.php component that can lead to arbitrary code execution. The issue stems from insufficient input handling for certain parameters (notably racerid and back) used to generate n...