This page lists publicly disclosed CVE vulnerabilities affecting comersus_open_technologies comersus_backoffice_lite (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2005-3397 | Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2. | [email protected] | 4.3 | 0.56% | 2005-11-01 | 2026-04-16 |
| CVE-2005-0303 | Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter. | [email protected] | 4.3 | 0.34% | 2005-05-02 | 2026-04-16 |
| CVE-2005-0302 | SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header. | [email protected] | 7.5 | 0.58% | 2005-05-02 | 2026-04-16 |
| CVE-2005-0301 | comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program. | [email protected] | 7.5 | 0.53% | 2005-05-02 | 2026-04-16 |