CVE-2014-4196

The CVE-2014-4196 entry describes an XSS vulnerability in Bank Soft Systems (BSS) RBS BS-Client 3.17.9, exploitable via the colorstyle parameter in bsi.dll. The impact is as described by the NVD entry; no exploit code or in-the-wild details are provided in the connected documents. Remediation det...

CVE-2014-10398: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in bsi.dll in Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 DICTIONARY, 2 FILTERIDENT, 3 FROMSCHEME, 4 FromPoint, ...