Approved changes feed: RSS · Atom
cpe:2.3:a:derbynet:derbynet:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Derbynet (f317e7f0-e20e-5344-96dd-888efd874bf1) |
|---|---|
| Product | Derbynet (985496ef-5590-5617-a595-80da6c5efcf7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jeffpiazza/derbynet |
purl2cpe | 2026-06-01 10:11:15.239198 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-30929 |
vulnerable | 2026-06-08 06:35:30.737284 |
Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:45.758Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30928 |
vulnerable | 2026-06-08 06:35:30.736682 |
Details available
SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:44.560Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30927 |
vulnerable | 2026-06-08 06:35:30.736079 |
Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:43.373Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30926 |
vulnerable | 2026-06-08 06:35:30.735494 |
Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:42.187Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30925 |
vulnerable | 2026-06-08 06:35:30.735134 |
Details available
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
Published: 2024-04-18T00:00:00.000Z
Updated: 2025-11-04T18:30:41.009Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30924 |
vulnerable | 2026-06-08 06:35:30.734681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30923 |
vulnerable | 2026-06-08 06:35:30.734037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30922 |
vulnerable | 2026-06-08 06:35:30.732022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30921 |
vulnerable | 2026-06-08 06:35:30.731493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30920 |
vulnerable | 2026-06-08 06:35:30.731023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.