CVE-2005-3852

The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2009-4859

CVE-2009-4859 affects Online Work Order Suite (OWOS) Lite Edition 3.10. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the show parameter to default.asp and report.asp, and via the go param...