CVE-2012-6631

Cross-site request forgery CSRF vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action...

PT-2014-2401

Name of the Vulnerable Software and Affected Versions Vessio NetBill version 1.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the full name or file title to accounts/admin/index.php, ...

CVE-2012-6631: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action...

CVE-2012-6632: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 file title to accounts/admin/index.php or 3 comment parameter in the support page to accounts/index2.php...

PT-2014-2400

Name of the Vulnerable Software and Affected Versions Vessio NetBill version 1.2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action. This occurs in the...