| Package | Affected versions | Patched versions |
|---|---|---|
| accounting journal management | = 1.0 |
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free