Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

comersus open technologies comersus backoffice lite 6.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-3397
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote malicious users to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE...
Comersus Open Technologies Comersus Backoffice Lite 4.30Comersus Open Technologies Comersus Backoffice Lite 4.5Comersus Open Technologies Comersus Backoffice PlusComersus Open Technologies Comersus Backoffice Plus 4.11Comersus Open Technologies Comersus Backoffice Plus 4.30Comersus Open Technologies Comersus Backoffice Plus 6.0Comersus Open Technologies Comersus Backoffice Lite 4.2Comersus Open Technologies Comersus Backoffice Lite 4.32Comersus Open Technologies Comersus Backoffice Plus 4.10Comersus Open Technologies Comersus Backoffice Plus 4.2Comersus Open Technologies Comersus Backoffice Plus 6.0.1Comersus Open Technologies Comersus Backoffice LiteComersus Open Technologies Comersus Backoffice Lite 4.10Comersus Open Technologies Comersus Backoffice Lite 4.11Comersus Open Technologies Comersus Backoffice Plus 4.32Comersus Open Technologies Comersus Backoffice Plus 4.5Comersus Open Technologies Comersus Backoffice Plus 5.0Comersus Open Technologies Comersus Backoffice Plus 5.0.9Comersus Open Technologies Comersus Backoffice Lite 5.0Comersus Open Technologies Comersus Backoffice Lite 5.0.9Comersus Open Technologies Comersus Backoffice Lite 6.0Comersus Open Technologies Comersus Backoffice Lite 6.0.1
NA
CVE-2005-0301
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote malicious users to bypass authentication and gain privileges via a direct request to the program.
Comersus Open Technologies Comersus Backoffice Lite 6.0Comersus Open Technologies Comersus Backoffice Lite 6.1
NA
CVE-2005-0302
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote malicious users to execute arbitrary SQL commands via the referer field in the HTTP header.
Comersus Open Technologies Comersus Backoffice Lite 6.1Comersus Open Technologies Comersus Backoffice Lite 6.0
NA
CVE-2005-0303
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote malicious users to inject arbitrary web script or HTML via the error parameter.
Comersus Open Technologies Comersus Backoffice Lite 6.0Comersus Open Technologies Comersus Backoffice Lite 6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook