← Database

CVE-2005-3285

MEDIUM CVSS: 4.3 Published: 2005-10-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters.

Affected Platforms

Comersus Open Technologies Comersus Backoffice Plus

Weakness Type

NVD-CWE-Other

References