DerbyNet - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2024-04-18.

Products

• DerbyNet - 3 CVEs

Newest CVEs of DerbyNet

• CVE-2024-30929 - CVSS 8 (high), 2024-04-18: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
• CVE-2024-30928 - CVSS 8.1 (high), 2024-04-18: SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
• CVE-2024-30923 - CVSS 9.8 (critical), 2024-04-18: SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering