CVE-2024-13063

IDOR in Akinsoft's MyRezzta

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Myrezzta

CVE-2024-13064

XSS in Akinsoft's MyRezzta

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS). This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Myrezzta

CVE-2024-13065

Business Logic Error in Akinsoft's MyRezzta

Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding. This issue affects MyRezzta: from s2.02.02 before v2.05.01.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Myrezzta

CVE-2024-13066

iFrame Injection in Akinsoft's LimonDesk

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Limondesk

CVE-2024-13068

Host Header Injection in Akinsoft's LimonDesk

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Limondesk

CVE-2024-13071

XSS in Akinsoft's e-Mutabakat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting (XSS). This issue affects e-Mutabakat: from 2.02.05 before v2.02.06.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

E-mutabakat

CVE-2024-13073

XSS in Akinsoft's TaskPano

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft TaskPano allows Cross-Site Scripting (XSS). This issue affects TaskPano: s1.06.04.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Taskpano

CVE-2023-1251

SQLi in Wolvox

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Akinsoft

Products

Wolvox