CVE-2024-35504

A cross-site scripting (XSS) vulnerability exists in the login page of FineSoft v8.0 . The flaw allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the errorname parameter of the URL following a failed login attempt. To mitigate this risk, it is recommend...

CVE-2024-37679

CVE-2024-37679 is a cross-site scripting vulnerability in Hangzhou Meisoft Information Technology Co.’s Finesoft v8.0 and earlier. The issue allows a remote attacker to execute arbitrary code by submitting a crafted script to the login.jsp parameter. The affected software is Finesoft (FineSoft) v...

CVE-2024-37680

CVE-2024-37680 affects Hangzhou Meisoft Information Technology Co.’s FineSoft

CVE-2024-37678

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script.