CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30927

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) vulnerability within the racer-results.php component. The root cause is the improper validation of user-supplied input specifically involving the racerid parameter. An attacker can exploit this to execute arbitrary cod...

PT-2024-23677 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows attackers to execute arbitrary code via the racer-results.php component. This is a Cross Site Scripting vulnerability. Recommendations: For DerbyNet versions 9.0 and below, conside...