PT-2012-2120

Name of the Vulnerable Software and Affected Versions Open Business Management OBM versions 2.4.0-rc13 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters in various PHP files. The vulnerable parameters include tf delegation, tf...

PT-2012-2123

Name of the Vulnerable Software and Affected Versions Open Business Management versions 2.4.0-rc13 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via various parameters in different PHP files, including sel domain id or...