CVE-2024-30920

Mô tả

Tham khảo

• chocapikk.com/posts/2024/derbynet-vulnerabilities · Exploit
• seclists.org/fulldisclosure/2024/Apr/6

Lỗ hổng khác của derbynet

• CVE-2024-30929CAO 8.0Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlis…
• CVE-2024-30928CAO 8.1SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/q…
• CVE-2024-30927TRUNG BÌNH 6.3Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component…
• CVE-2024-30926TRUNG BÌNH 4.6Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
• CVE-2024-30925TRUNG BÌNH 6.5Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.