Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HDerbynet
APPDerbynet≤ 9.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEXSS
CWE
Related vulnerabilities
CVE-2024-30923CRITICAL9.8PL ✓ten sam produkt
SQL Injection z możliwością RCE w DerbyNet v9.0 i wcześniejszych
CVE-2024-30922CRITICAL9.8PL ✓ten sam produkt
SQL Injection w DerbyNet v9.0 — zdalne wykonanie kodu przez klauzulę WHERE
CVE-2024-31818CRITICAL9.8PL ✓ten sam produkt
Path Traversal z RCE w DerbyNet v.9.0 — komponent kiosk.php
CVE-2024-30920HIGH7.4ten sam produkt
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary co...
CVE-2024-30928HIGH8.1ten sam produkt
SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via ...