Lucene search
K

8 matches found

NVD
NVD
added 2024/09/27 3:15 p.m.17 views

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

7.3CVSS0.07769EPSS
Exploits2References2
OSV
OSV
added 2024/09/27 3:15 p.m.0 views

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

7.3CVSS5.8AI score0.07769EPSS
Exploits2References2
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.11 views

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

0.07769EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.4 views

PT-2024-28888

Name of the Vulnerable Software and Affected Versions openPetra version 2023.02 Description The issue allows a remote attacker to obtain sensitive information via the "serverMFinDev.asmx" function. This is a Cross Site Scripting vulnerability. Recommendations For openPetra version 2023.02, consid...

7.3CVSS5.9AI score0.07769EPSS
Exploits2References7
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.2 views

OpenPetra 安全漏洞

OpenPetra is a free management software from OpenPetra, Inc. A security vulnerability exists in OpenPetra version 2023.02, which stems from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the serverMFinDev.asmx function...

7.3CVSS6AI score0.07769EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.13 views

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

6.3AI score0.07769EPSS
Exploits2References2
CVE
CVE
added 2024/09/27 12:0 a.m.43 views

CVE-2024-40509

OpenPetra 2023.02 is affected by a Cross Site Scripting vulnerability in the serverMFinDev.asmx function. The issue enables an unauthenticated or remote attacker to obtain sensitive information (and, per exploit details, potentially steal cookies) via crafted input in serverMFinDev.asmx. Root cau...

7.3CVSS6.3AI score0.07769EPSS
Exploits2References2Affected Software1
GithubExploit
GithubExploit
added 2024/07/13 10:1 p.m.51 views

Exploit for Cross-site Scripting in Openpetra

CVE-2024-40509 Cross Site Scripting vulnerability in openPet...

7.3CVSS5.8AI score0.07769EPSS
Exploits2
Rows per page
Query Builder