DerbyNet vulnerabilities
We track 4 vulnerabilities in DerbyNet products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 18, 2024.
Latest DerbyNet vulnerabilities
- 8.1 High severity
DerbyNet: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
- 9.8 Critical severity
DerbyNet: Improper Control of Generation of Code
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
- 7.4 High severity
derbynet: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component.
- 9.8 Critical severity
derbynet: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.