Vendor

DerbyNet

Products

CVEs

Across products

Status

Private

Products

DerbyNet
11 CVEs

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-30923	DerbyNet DerbyNet	Cri	0.64	9.8	0.01	Apr 18, 2024	SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
CVE-2024-30922	DerbyNet DerbyNet	Cri	0.64	9.8	0.01	Apr 18, 2024	SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.
CVE-2024-31818	DerbyNet DerbyNet	Cri	0.64	9.8	0.02	Apr 12, 2024	Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.
CVE-2024-30928	DerbyNet DerbyNet	Hig	0.53	8.1	0.01	Apr 18, 2024	SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
CVE-2024-30929	DerbyNet DerbyNet	Hig	0.52	8.0	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
CVE-2024-30920	DerbyNet DerbyNet	Hig	0.48	7.4	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component.
CVE-2024-30925	DerbyNet DerbyNet	Med	0.42	6.5	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
CVE-2024-30927	DerbyNet DerbyNet	Med	0.41	6.3	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
CVE-2024-30921	DerbyNet DerbyNet	Med	0.35	5.4	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component.
CVE-2024-30926	DerbyNet DerbyNet	Med	0.30	4.6	0.01	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
CVE-2024-30924	DerbyNet DerbyNet	Med	0.30	4.6	0.00	Apr 18, 2024	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.

CVE-2024-30923CriApr 18, 2024
DerbyNet
DerbyNet
risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
CVE-2024-30922CriApr 18, 2024
DerbyNet
DerbyNet
risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.
CVE-2024-31818CriApr 12, 2024
DerbyNet
DerbyNet
risk 0.64cvss 9.8epss 0.02
Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.
CVE-2024-30928HigApr 18, 2024
DerbyNet
DerbyNet
risk 0.53cvss 8.1epss 0.01
SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
CVE-2024-30929HigApr 18, 2024
DerbyNet
DerbyNet
risk 0.52cvss 8.0epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
CVE-2024-30920HigApr 18, 2024
DerbyNet
DerbyNet
risk 0.48cvss 7.4epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component.
CVE-2024-30925MedApr 18, 2024
DerbyNet
DerbyNet
risk 0.42cvss 6.5epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
CVE-2024-30927MedApr 18, 2024
DerbyNet
DerbyNet
risk 0.41cvss 6.3epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
CVE-2024-30921MedApr 18, 2024
DerbyNet
DerbyNet
risk 0.35cvss 5.4epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component.
CVE-2024-30926MedApr 18, 2024
DerbyNet
DerbyNet
risk 0.30cvss 4.6epss 0.01
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
CVE-2024-30924MedApr 18, 2024
DerbyNet
DerbyNet
risk 0.30cvss 4.6epss 0.00
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.