Janobe Young Entrepreneur E-Negosyo System vulnerabilities

6 CVEs affecting Janobe Young Entrepreneur E-Negosyo System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33978, published 2024-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-33958, published 2024-08-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information…
CVE-2024-33957, published 2024-08-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information…
CVE-2024-33978, published 2024-08-06. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via…
CVE-2024-33977, published 2024-08-06. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via…
CVE-2024-33976, published 2024-08-06. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated…
CVE-2024-33975, published 2024-08-06. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated…