CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12972

CVE-2024-12972 tracks an XSS vulnerability in Akinsoft OctoCloud caused by improper neutralization of input during web page generation. Affected versions are s1.09.01 through v1.11.01 (inclusive). The issue allows cross-site scripting when users view pages generated with untrusted input. Remediat...

Akinsoft OctoCloud 安全漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A security bypass vulnerability exists in Akinsoft OctoCloud versions prior to s1.09.03 through v1.11.01, which can...

PT-2025-35550

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.02 through v1.11.00 Description: An authorization bypass exists due to a user-controlled key, potentially leading to resource leak exposure in Akinsoft OctoCloud. Recommendations: Update Akinsoft OctoCloud to...

Akinsoft OctoCloud 访问控制错误漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A source validation error vulnerability exists in versions prior to Akinsoft OctoCloud s1.09.01 through v1.11.01,...

Akinsoft OctoCloud 安全漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. Akinsoft OctoCloud versions prior to s1.09.02 through v1.11.01 contain a security bypass vulnerability that can be...

PT-2025-35548

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through 1.10.10 Description: Akinsoft OctoCloud is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

PT-2025-35563

Name of the Vulnerable Software and Affected Versions Akinsoft OctoCloud versions s1.09.03 through 1.11.00 Description An improper restriction of excessive authentication attempts issue exists in Akinsoft OctoCloud, allowing for authentication bypass. Recommendations Update Akinsoft OctoCloud to...

Akinsoft OctoCloud 跨站脚本漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. Cross-site scripting vulnerability exists in Akinsoft OctoCloud versions prior to s1.09.01 through v1.11.01, no...