Unscored CVE-2005-0303 EUVD-2005-0304GHSA-97mc-96f3-2vqp

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in Bac…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter.

References

20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 mailing-list
http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html
backoffice-lite-xss(19014) vdb-entry