Derbynet

11 CVEs across 1 Derbynet products. Browse Derbynet vulnerabilities, severities, and proof-of-concept exploits.

Derbynet products with known CVEs

Product	CVEs
Derbynet	11

Derbynet CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2024-30929`	High	`8.0`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
`CVE-2024-30928`	High	`8.1`	2024-04-18	SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
`CVE-2024-30927`	Medium	`6.3`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
`CVE-2024-30926`	Medium	`4.6`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
`CVE-2024-30925`	Medium	`6.5`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
`CVE-2024-30924`	Medium	`4.6`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
`CVE-2024-30923`	Critical	`9.8`	2024-04-18	SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
`CVE-2024-30922`	Critical	`9.8`	2024-04-18	SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.
`CVE-2024-30921`	Medium	`5.4`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component.
`CVE-2024-30920`	High	`7.4`	2024-04-18	Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component.
`CVE-2024-31818`	Critical	`9.8`	2024-04-12	Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.