PT-2018-6618

Name of the Vulnerable Software and Affected Versions: Office Tracker version 11.2.5 Description: The issue allows for XSS via the logincount parameter to the "/otweb/OTPClientLogin" API endpoint. Recommendations: For Office Tracker version 11.2.5, avoid using the logincount parameter in the...

CVE-2017-18023: Improper Neutralization of Input During Web Page Generation

Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI...