CVE-2017-5990

An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/labelmgr/jsinclude.php" and...

PhreeBooks R30RC4 Cross Site Scripting

------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Reflected Cross-site Scripting Download................http://sourceforge.net/projects/phreebooks Release Date............2/22/2011 Tested...