CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30927

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) vulnerability within the racer-results.php component. The root cause is the improper validation of user-supplied input specifically involving the racerid parameter. An attacker can exploit this to execute arbitrary cod...

PT-2024-23677 · Derbynet · Derbynet

Name of the Vulnerable Software and Affected Versions: DerbyNet versions 9.0 and below Description: The issue allows attackers to execute arbitrary code via the racer-results.php component. This is a Cross Site Scripting vulnerability. Recommendations: For DerbyNet versions 9.0 and below, conside...

Oracle E-Business Suite India Localization Sub-component Results Component Unauthorized Access

The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...