Approved changes feed: RSS · Atom

cpe:2.3:a:derbynet:derbynet:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorDerbynet (f317e7f0-e20e-5344-96dd-888efd874bf1)
ProductDerbynet (985496ef-5590-5617-a595-80da6c5efcf7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jeffpiazza/derbynet purl2cpe 2026-06-01 10:11:15.239211

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31818 vulnerable 2026-06-08 06:35:32.126734 Details available
Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.
Published: 2024-04-12T00:00:00.000Z
Updated: 2024-08-02T01:59:50.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30927 vulnerable 2026-06-08 06:35:30.735908 Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:43.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30926 vulnerable 2026-06-08 06:35:30.735433 Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:42.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30925 vulnerable 2026-06-08 06:35:30.734988 Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:41.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30924 vulnerable 2026-06-08 06:35:30.734512 Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:39.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30922 vulnerable 2026-06-08 06:35:30.731810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30921 vulnerable 2026-06-08 06:35:30.731421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30920 vulnerable 2026-06-08 06:35:30.729773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.