Lucene search
MitreCVE-2005-0303HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0303
2005-05-0204:00:00
mitre
web.nvd.nist.gov
39
xss
vulnerability
backoffice lite 6.0
backoffice lite 6.01
injection
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.003
Percentile
65.6%
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter.
Affected configurations
Node
comersus_open_technologiescomersus_backoffice_liteMatch6.0
ORcomersus_open_technologiescomersus_backoffice_liteMatch6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| comersus_open_technologies | comersus_backoffice_lite | 6.0 | cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:* |
| comersus_open_technologies | comersus_backoffice_lite | 6.1 | cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.003
Percentile
65.6%
Related for CVE-2005-0303