346 matches found
CVE-2005-3285
Cross-site scripting XSS vulnerability in comersusbackofficesearchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the 1 forwardTo1, 2 forwardTo2, 3 nameFT1, or 4 nameFT2 parameters...
CVE-2005-3285
CVE-2005-3285 describes a Cross-site scripting (XSS) vulnerability in Comersus BackOffice Plus, specifically in comersus_backoffice_searchItemForm.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters forwardTo1, forwardTo2, nameFT1, or nameFT2. The vuln...
CVE-2005-3285
Cross-site scripting XSS vulnerability in comersusbackofficesearchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the 1 forwardTo1, 2 forwardTo2, 3 nameFT1, or 4 nameFT2 parameters...
Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities
Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15118/info BackOffice Plus is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...
Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/15118/info BackOffice Plus is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execut...
CVE-2005-0301
comersusbackofficeinstall10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program...
CVE-2005-0302
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...
CVE-2005-0303
Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-0303
CVE-2005-0303 applies to BackOffice Lite 6.0 and 6.01, where two files (comersus_supportError.asp and comersus_backofficelite_supportError.asp) are vulnerable to cross-site scripting via the error parameter. The underlying issue is reflected XSS allowing remote attackers to inject arbitrary scrip...
CVE-2005-0301
comersusbackofficeinstall10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program...
CVE-2005-0302
CVE-2005-0302 describes an SQL injection vulnerability in the BackOffice Lite web application (version 6.0 and 6.01) where an attacker can inject arbitrary SQL commands through the Referer header in requests to default.asp. This live vulnerability could allow unauthorized data access or modificat...
CVE-2005-0301
The CVE-2005-0301 entry affects Comersus BackOffice Lite 6.0 and 6.01. The vulnerability arises in comersus_backoffice_install10.asp, allowing remote attackers to bypass authentication and gain privileges via a direct request to the program. This aligns with the OpenVAS entry describing an admini...
CVE-2005-0302
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...
CVE-2005-0303
Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...
bug report comersus Back Office Lite 6.0 and 6.0.1
Software: Comersus ASP Shopping Cart Version: 6.0 Free version containing BackOffice Lite 6.0 and 6.01 Vendor: Comersus 1. Software Description -------------------- Comersus ASP shopping cart is a set of ASP scripts creating an online shoppingcart. It works on a database of your own choosing,...
CVE-2002-0736
Microsoft BackOffice 4.0/4.5, when configured for remote access, is vulnerable to authentication bypass via an HTTP request using a non-blank auth_type, allowing remote attackers to access administrative ASP pages. The provided documents describe the vulnerability and impact but do not include a ...
CVE-2002-0736
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type authtype that is not blank...
CVE-2002-0736
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type authtype that is not blank...