Vulnerabilities

TI-2012-05350 CVE-2012-6632 · GHSA-v239-q543-9r88

Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index.php or (3) comment p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01201 Published 2014-01-16 No fix listed CWE-79

TI-2012-05349 CVE-2012-6631 · GHSA-3v24-cp75-hv5g

Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio…

LOW 31

Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client act…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00694 Published 2014-01-16 No fix listed CWE-352

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote…

Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio…