# SPBAS Business Automation Software- XSS & CSRF Vulnerability # Date: 16 June 2013 # Author: Christy Philip Mathew - www.offcon.org # Vendor or Software Link: http://www.spbas.com # Version: 2012 *1.XSS Vulnerability* (a) Client Area -> My Info -> Update the first name and last name to john"> (b) Update the security question to john"> *2.Cross Site Request Forgery* (a) Change Customer Information
(b) Change Security Question Answer