Vulnerabilities > Comersus Open Technologies > Comersus Backoffice Plus > 5.0.9

DATE CVE VULNERABILITY TITLE RISK
2005-11-01 CVE-2005-3397 Input Validation And Information Disclosure vulnerability in Comersus BackOffice
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp.
4.3