Vulnerability in Comersus Open Technologies Backoffice Lite

CVE-2005-0303

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter.

EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.

Affected products

Comersus_open_technologies Comersus_backoffice_lite — versions 6.0, 6.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)