SecurityTracker > View Topics > Vendor > Comersus Open Technologies

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Oct 17 2005	Comersus BackOffice Plus Input Validation Hole in 'searchItemForm.asp' Permits Cross-Site Scripting Attacks
Jul 7 2005	Comersus Input Validation Flaws in 'email', 'idProduct', 'name', and 'message' Parameters Permit SQL Injection and Cross-Site Scripting Attacks
Apr 18 2005	Comersus Input Validation Hole in 'curPage' Parameter in 'comersus_searchItem.asp' Permits Cross-Site Scripting Attacks
Apr 4 2005	Comersus Input Validation Hole in 'username' Field Lets Remote Users Conduct Cross-Site Scripting Attacks
Jan 25 2005	Comersus Grants Administrative Access to Remote Users and Permits SQL Injection and Cross-Site Scripting Attacks
Sep 1 2004	Comersus Shopping Cart 'redirecturl' Input Validation Flaw Permits HTTP Response Splitting Attacks
Jul 7 2004	Comersus Cart Lets Remote Users Modify Prices When Ordering
Jul 7 2004	Comersus Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks
Jun 26 2003	Comersus Shopping Cart Discloses the Commerce Database to Remote Users