CVE-2024-49706

The CVE-2024-49706 entry concerns Internet Starter, a module of the SoftCOM iKSORIS system. The vulnerability is an Open Redirect caused by including base64-encoded URLs in the target parameter of a POST request to a specific endpoint. The underlying component exposed to this issue is the handlin...

CVE-2024-49707

CVE-2024-49707: Reflected XSS vulnerability in Internet Starter, a module of SoftCOM iKSORIS. An attacker could lure a user into submitting a password-reset form containing malicious script, which would execute in the user’s browser context. Affects Internet Starter component of the iKSORIS syste...

CVE-2024-13598

Internet Starter, a module of SoftCOM iKSORIS, is vulnerable to Reflected XSS via the form-field creation feature that adds new parameters. The vulnerability could allow an attacker to execute script in the victim’s browser context when a user submits a crafted form. The issue is addressed in ver...

CVE-2024-10087

CVE-2024-10087 concerns the Internet Starter module of SoftCOM iKSORIS, which is vulnerable to a Reflected XSS attack. The issue arises when a crafted link containing malicious script is embedded in references to other resources, causing the script to execute in the user’s context. The CVSS metri...

CVE-2024-49705

Technical details are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-49709

Technical details about CVE-2024-49709 are not publicly available in the provided connected documents. The initial description mentions session cookie abuse and non-destroyed sessions; monitor for official advisories or patches for confirmation of affected versions and remediation.

CVE-2024-10089

Technical details about CVE-2024-10089 are not publicly available in the provided documents. No specifics on affected components, root cause, exploit info, or fixes beyond the brief description are provided.

CVE-2024-49708

No public technical details for CVE-2024-49708 are provided in the connected documents. The Initial Description notes a Stored XSS in Internet Starter (SoftCOM iKSORIS) with patch in 79.0, but no further specifics are supplied.

CVE-2024-10090

CVE-2024-10090 affects Internet Starter, a module of SoftCOM iKSORIS. The flaw is a Reflected XSS in the user-creation form, allowing injected scripts to run in the victim’s browser context. The entry provides a standard CVSSv3.1 base score of 6.1 (MEDIUM) with network attack vector, no privilege...

CVE-2024-10088

CVE-2024-10088 affects the Internet Starter module of SoftCOM iKSORIS. It is vulnerable to a Reflected XSS attack where a user is tricked into submitting a login form containing a malicious script, causing the script to run in the user’s browser context. The vulnerability is patched in version 79...