CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 10:17 a.m.•5 views

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

6.5CVSS7.3AI score0.00257EPSS

Exploits2References1

NVD•added 2024/04/18 10:15 p.m.•13 views

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

6.5CVSS7AI score0.00257EPSS

Exploits2References2

Cvelist•added 2024/04/18 12:0 a.m.•14 views

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

7.2AI score0.00257EPSS

Exploits2References1

CVE•added 2024/04/18 12:0 a.m.•50 views

CVE-2024-30925

Summary (CVE-2024-30925): DerbyNet versions 9.0 and below contain a Cross Site Scripting vulnerability in the photo-thumbs.php component that can lead to arbitrary code execution. The issue stems from insufficient input handling for certain parameters (notably racerid and back) used to generate n...

6.5CVSS7.2AI score0.00257EPSS

Exploits2References2Affected Software1