CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4726 – Campcodes Legal Case Management System clients cross site scripting
https://notcve.org/view.php?id=CVE-2024-4726
A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument f_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_clients.md https://vuldb.com/?ctiid.263804 https://vuldb.com/?id.263804 https://vuldb.com/?submit.331989 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4725 – Campcodes Legal Case Management System client_user cross site scripting
https://notcve.org/view.php?id=CVE-2024-4725
A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/client_user. The manipulation of the argument f_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_client_user.md https://vuldb.com/?ctiid.263803 https://vuldb.com/?id.263803 https://vuldb.com/?submit.331988 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4724 – Campcodes Legal Case Management System case-type cross site scripting
https://notcve.org/view.php?id=CVE-2024-4724
A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/case-type. The manipulation of the argument case_type_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_case-type.md https://vuldb.com/?ctiid.263802 https://vuldb.com/?id.263802 https://vuldb.com/?submit.331983 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4723 – Campcodes Legal Case Management System case-status cross site scripting
https://notcve.org/view.php?id=CVE-2024-4723
A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument case_status leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_case-status.md https://vuldb.com/?ctiid.263801 https://vuldb.com/?id.263801 https://vuldb.com/?submit.331982 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4681 – Campcodes Legal Case Management System Setting general-setting unrestricted upload
https://notcve.org/view.php?id=CVE-2024-4681
A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/file_upload.md https://vuldb.com/?ctiid.263622 https://vuldb.com/?id.263622 https://vuldb.com/?submit.331468 • CWE-434: Unrestricted Upload of File with Dangerous Type •