← All advisories

Medium severity6.3NVD Advisory· Published Apr 18, 2024· Updated Jun 17, 2026

CVE-2024-30927

CVE-2024-30927

Description

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

DerbyNet/DerbyNet3 versions
cpe:2.3:a:derbynet:derbynet:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:derbynet:derbynet:*:*:*:*:*:*:*:*range: <=9.0
- (no CPE)
- (no CPE)range: <=9.0

Patches

Vulnerability mechanics

References

2

chocapikk.com/posts/2024/derbynet-vulnerabilities/nvdExploitThird Party Advisory
seclists.org/fulldisclosure/2024/Apr/13nvd

News mentions

0

No linked articles in our index yet.