5 matches found
CVE-2024-30925
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...
6.5CVSS7.3AI score0.00567EPSS
SaveExploits2References1
CVE-2024-30925
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...
6.5CVSS7AI score0.00567EPSS
SaveExploits2References2
CVE-2024-30925
Summary (CVE-2024-30925): DerbyNet versions 9.0 and below contain a Cross Site Scripting vulnerability in the photo-thumbs.php component that can lead to arbitrary code execution. The issue stems from insufficient input handling for certain parameters (notably racerid and back) used to generate n...
6.5CVSS7.2AI score0.00567EPSS
SaveExploits2References2Affected Software1
20