BEO Atlas Einfuhr-Ausfuhr Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in BEO GmbH's software, BEO Atlas Einfuhr Ausfuhr version 3.0. This vulnerability allows attackers to execute arbitrary code in the context of the user's browser by injecting a crafted payload into the 'userid' and 'password' parameters on the login page.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, access the login page of the application. Append a query parameter 'userid' or 'password' with a payload that includes JavaScript, such as a script tag. When the page is loaded, the injected script will be executed, demonstrating the cross-site scripting vulnerability.

Remediation

A patch for this vulnerability has been released and is available for application.