PT-2017-14306

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 2.4 Description The issue allows SQL injection via the usertoedit parameter to "admin/adminuseredit.php" or the log id parameter to "admin/editgroup.php". Recommendations For Xavier PHP Management Panel...