CVE-2009-4859 | BDVDB-2026-41644 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) default.asp and (2) report.asp, and the (3) go parameter to login.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/0908-exploits/owosasp-xss.txt
http://secunia.com/advisories/36244

Exploit#

No public exploit known

History#

Version 12010-05-10Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.