Skip to content
OpenAdvisories

Product · janobe

E-Negosyo System

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2024-33978

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'.

    janobe E-Negosyo System
  • High 7.1
    CVE-2024-33977

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'.

    janobe E-Negosyo System
  • High 7.1
    CVE-2024-33976

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' …

    janobe E-Negosyo System
  • High 7.1
    CVE-2024-33975

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view…

    janobe E-Negosyo System