CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

OSV•added 2024/05/04 8:15 p.m.•1 views

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

6.1CVSS5.8AI score

Exploits0References1

NVD•added 2024/05/04 8:15 p.m.•8 views

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

6.1CVSS5.7AI score0.0047EPSS

Exploits1References1

NVD•added 2024/05/04 8:15 p.m.•8 views

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

7.1CVSS5.7AI score0.01654EPSS

Exploits1References1

Cvelist•added 2024/05/04 12:0 a.m.•17 views

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

5.8AI score0.01654EPSS

Exploits1References1

Cvelist•added 2024/05/04 12:0 a.m.•11 views

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

5.8AI score0.0047EPSS

Exploits1References1

CVE•added 2024/05/04 12:0 a.m.•53 views

CVE-2024-34468

CVE-2024-34468 affects Rukovoditel prior to 3.5.3. The issue is an input handling failure in the user_photo parameter that enables a cross-site scripting (XSS) payload in the My Page view. Reported impact is XSS; the primary remediation is to upgrade to version 3.5.3 or later. No explicit exploit...

6.1CVSS5.8AI score0.0047EPSS

Exploits1References1Affected Software1