DerbyNet (DerbyNet) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 0 known versions, newest CVE from 2024-04-18. Vendor: DerbyNet.

CVEs of DerbyNet

• CVE-2024-30928 - CVSS 8.1 (high), 2024-04-18: SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
• CVE-2024-30929 - CVSS 8 (high), 2024-04-18: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
• CVE-2024-30923 - CVSS 9.8 (critical), 2024-04-18: SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering