Comersus Backoffice Plus CVEs and Security Vulnerabilities

Export limit exceeded: 10823 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2005-3285

Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters.

CVSS 2.0 · 4.3 Medium EPSS 3.5% KEV · Not listed

Vendors

Comersus Open Technologies

Products

Comersus Backoffice Plus

CVE-2005-3397

Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Comersus Open Technologies

Products

Comersus Backoffice Lite Comersus Backoffice Plus

Page 1 of 1.