6 matches found
CVE-2024-30925
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...
CVE-2024-30925
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...
CVE-2024-30925: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...
CVE-2024-30925
DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) flaw in the photo-thumbs.php component. The root cause is the improper validation of user-supplied input, specifically within the racerid parameter. An attacker could exploit this to execute arbitrary code or steal a v...
