Vulnerability in Comersus Open Technologies Backoffice Lite
CVE-2005-3397
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2.
EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.
Affected products
- Comersus_open_technologies Comersus_backoffice_lite — versions 4.2, 4.5, 4.10
- Comersus_open_technologies Comersus_backoffice_plus — versions 4.2, 4.5, 4.10
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)