Filtered by vendor Ujangrohidin Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10286 1 Ujangrohidin 1 Localserver 2024-10-24 6.1 Medium
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.
CVE-2024-10289 1 Ujangrohidin 1 Localserver 2024-10-24 6.1 Medium
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.
CVE-2024-10288 1 Ujangrohidin 1 Localserver 2024-10-24 6.1 Medium
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.
CVE-2024-10287 1 Ujangrohidin 1 Localserver 2024-10-24 6.1 Medium
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName.