CVE-2014-4196

The CVE-2014-4196 entry describes an XSS vulnerability in Bank Soft Systems (BSS) RBS BS-Client 3.17.9, exploitable via the colorstyle parameter in bsi.dll. The impact is as described by the NVD entry; no exploit code or in-the-wild details are provided in the connected documents. Remediation det...

PT-2020-7597

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client versions 2.5, 2.4, and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including...

CVE-2014-10398: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in bsi.dll in Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 DICTIONARY, 2 FILTERIDENT, 3 FROMSCHEME, 4 FromPoint, ...

PT-2020-7673

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the colorstyle parameter. This could potentially lead to unauthorized actions on...

CVE-2014-4197

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

PT-2014-5730

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the CARDS or XACTION parameter. Recommendations For Bank Soft Systems BSS RBS BS-Client...