CVE-2024-30922

概要

参考情報

• chocapikk.com/posts/2024/derbynet-vulnerabilities · Exploit
• seclists.org/fulldisclosure/2024/Apr/8

derbynet のその他の脆弱性

• CVE-2024-30929高 8.0Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlis…
• CVE-2024-30928高 8.1SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/q…
• CVE-2024-30927中 6.3Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component…
• CVE-2024-30926中 4.6Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
• CVE-2024-30925中 6.5Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.