Approved changes feed: RSS · Atom

cpe:2.3:a:comersus_open_technologies:comersus_backoffice_plus:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

VendorComersus Open Technologies (7b5b0390-6e16-5d28-a725-b0b206bcde23)
ProductComersus Backoffice Plus (3eb99773-c81a-5326-ae0d-00a5d386ca45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3397 vulnerable 2026-06-08 04:48:40.606028 Details available
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2.
Published: 2005-11-01T11:00:00.000Z
Updated: 2024-09-16T19:35:41.957Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.