Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client (aka RBS BS-Client. Retail Client) 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) DICTIONARY, (2) FILTERIDENT, (3) FROMSCHEME, (4) FromPoint, or (5) FName_0 parameter and a valid sid parameter value.
References
Link | Resource |
---|---|
https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-01-03T19:40:49
Updated: 2020-01-03T19:40:49
Reserved: 2020-01-03T00:00:00
Link: CVE-2014-10398
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-01-03T20:15:11.123
Modified: 2020-01-14T21:36:34.047
Link: CVE-2014-10398
JSON object: View
Redhat Information
No data.
CWE