Approved changes feed: RSS · Atom

cpe:2.3:a:ujangrohidin:localserver:1.0.9:*:*:*:*:*:*:*

part: a version: 1.0.9 update: *

VendorUjangrohidin (579af252-d3b8-536d-a8e6-46b0f418bf49)
ProductLocalserver (993d8e8f-a07e-56c9-8c14-6bcd3667ddc0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10289 vulnerable 2026-06-08 06:22:03.958056 Cross-Site Scripting (XSS) vulnerability in LocalServer
MEDIUM (6.1)
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.
Published: 2024-10-23T12:03:48.367Z
Updated: 2024-10-23T12:59:03.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10288 vulnerable 2026-06-08 06:22:03.957584 Cross-Site Scripting (XSS) vulnerability in LocalServer
MEDIUM (6.1)
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.
Published: 2024-10-23T12:03:10.937Z
Updated: 2024-10-23T12:59:41.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10287 vulnerable 2026-06-08 06:22:03.957215 Cross-Site Scripting (XSS) vulnerability in LocalServer
MEDIUM (6.1)
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName.
Published: 2024-10-23T12:02:44.915Z
Updated: 2024-10-23T13:00:10.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10286 vulnerable 2026-06-08 06:22:03.956627 Cross-Site Scripting (XSS) vulnerability in LocalServer
MEDIUM (6.1)
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.
Published: 2024-10-23T12:01:40.766Z
Updated: 2024-10-23T13:00:28.820Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.