CVE-2024-37680

Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows remote attackers to execute arbitrary code. Enter any account and password, click Login, the page will report an error, and a controllable parameter will appear at the URL:weburl.

• CWE-79
• CWE-79

• https://github.com/dabaizhizhu/123/issues/5Exploit, Issue Tracking
• https://github.com/dabaizhizhu/123/issues/5Exploit, Issue Tracking

Published

Jun 24, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37675Cross Site Scripting vulnerability in Tessi Docubase Documen…5.4
• CVE-2024-37676An issue in htop-dev htop v.2.20 allows a local attacker to …8.4
• CVE-2024-37677An issue in Shenzhen Weitillage Industrial Co., Ltd the acce…7.5
• CVE-2024-37678Cross Site Scripting vulnerability in Hangzhou Meisoft Infor…5.3
• CVE-2024-37679Cross Site Scripting vulnerability in Hangzhou Meisoft Infor…6.1
• CVE-2024-3768A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-37681An issue the background management system of Shanxi Internet…6.5
• CVE-2024-3769A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-37694Rejected reason: This submission has been rejected by the CN…
• CVE-2024-37699An issue in DataLife Engine v.17.1 and before is vulnerable …9.8
• CVE-2024-3770A vulnerability has been found in PHPGurukul Student Record …9.8
• CVE-2024-3771A vulnerability was found in PHPGurukul Student Record Syste…8.8