CVE-2024-35504

A cross-site scripting (XSS ) vulnerability exists in the login page of FineSoft v8.0 . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the errorname URL parameter following a failed login attempt. To mitigate this risk until a formal fix is released, it ...

CVE-2024-37679

CVE-2024-37679 is a cross-site scripting vulnerability in Hangzhou Meisoft Information Technology Co.’s Finesoft v8.0 and earlier. The issue allows a remote attacker to execute arbitrary code by submitting a crafted script to the login.jsp parameter. The affected software is Finesoft (FineSoft) v...

CVE-2024-37680

CVE-2024-37680 affects Hangzhou Meisoft Information Technology Co.’s FineSoft

CVE-2024-37678

A Cross Site Scripting (XSS) vulnerability exists in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft version v.8.0 and before . This pharmaceutical management software is susceptible to a flaw that allows a remote attacker to execute arbitrary code by providing a crafted script . No sp...