VYPR

Proman Xpress

by Itechscripts

CVEs (2)

  • CVE-2012-4266Aug 13, 2012
    risk 0.03cvss epss 0.02

    Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the cl_comments parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2012-4265Aug 13, 2012
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.