XSS in Onlinetechtools.com Owos Lite

CVE-2009-4859

Multiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) default.asp and (2) report.asp, and the (3) go parameter to login.asp.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.0th percentile) — read the EPSS interpretation.

Affected products

Onlinetechtools.com Owos_lite — versions 3.10
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)