CVE-2012-6631

CVE-2012-6631 describes a Cross-site request forgery (CSRF) in the NetBill 1.2 admin interface. The vulnerability resides in accounts/admin/index.php and can allow an attacker to hijack an administrator’s session to perform actions such as adding new client accounts via the new-client action. Aff...

CVE-2012-6632

CVE-2012-6632 affects Vessio NetBill 1.2. It contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via (1) the full name, (2) the file title to accounts/admin/index.php, or (3) the comment parameter on accounts/index2.php. Documented impact indic...