Filtered by vendor Comersus Open Technologies Subscriptions
Filtered by product Comersus Backoffice Lite Subscriptions

Search

Switch to Advanced Search (Beta)
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-3397 1 Comersus Open Technologies 2 Comersus Backoffice Lite, Comersus Backoffice Plus 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2.
CVE-2005-0303 1 Comersus Open Technologies 1 Comersus Backoffice Lite 2024-11-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter.
CVE-2005-0302 1 Comersus Open Technologies 1 Comersus Backoffice Lite 2024-11-20 N/A
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.
CVE-2005-0301 1 Comersus Open Technologies 1 Comersus Backoffice Lite 2024-11-20 N/A
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program.