Vulnerabilities (CVE)

Filtered by vendor Ujangrohidin Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-10286 1 Ujangrohidin 1 Localserver 2024-10-24 N/A 6.1 MEDIUM
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.
CVE-2024-10289 1 Ujangrohidin 1 Localserver 2024-10-24 N/A 6.1 MEDIUM
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.
CVE-2024-10288 1 Ujangrohidin 1 Localserver 2024-10-24 N/A 6.1 MEDIUM
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.
CVE-2024-10287 1 Ujangrohidin 1 Localserver 2024-10-24 N/A 6.1 MEDIUM
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName.