This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2024-13598 | BDVDB-2026-274669 Detail

SoftCOMiKSORIS

Description#

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run the code in their's context.  This vulnerability has been patched in version 79.0

Impact#

CAPEC-591 Reflected XSS

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.