CVE-2009-3901

The CVE-2009-3901 entry documents multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS. The flaws allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other vectors. CVSS notes a medium base score (4.3) with no confidential...

CVE-2009-3905

CVE-2009-3905 concerns XSS in the e-Courier CMS. The vulnerability arises from unsafely handling the UserGUID parameter in multiple pages: Wizard_tracking.asp, wizard_oe2.asp, your-register.asp, main-whyregister.asp, and your.asp in home/, plus unspecified vectors. Public details from NVD/NVD-der...