title: Telos Automated Message Handling System reflected XSS in itemlookup.asp
description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: Automated Message Handling System
vendor: Telos
versions:
lessThan: 4.1.5.5, status: affected, version: unspecified, versionType: custom
}