CB
Product
Comersus Backoffice Lite
by Comersus Open Technologies · last CVE Nov 1, 2005
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Comersus Backoffice Lite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2005-3397
–
1%
Nov 1
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to…
Affected: 4.2; 4.5; 4.10; 4.11; 4.30; 4.32; +4 more
CVE-2005-0301
–
2%
May 2
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program
Affected: 6.0; 6.1
CVE-2005-0302
–
1%
May 2
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header
Affected: 6.0; 6.1
CVE-2005-0303
–
1%
May 2
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote…
Affected: 6.0; 6.1
Showing 4