# SPBAS Business Automation Software- XSS & CSRF Vulnerability
# Date: 16 June 2013
# Author: Christy Philip Mathew - www.offcon.org
# Vendor or Software Link: http://demo.spbas.com
# Version: 2012
*1.XSS Vulnerability*
(a) Client Area -> My Info -> Update the first name and last name to
john">
(b) Update the security question to
john">
*2.Cross Site Request Forgery*
(a) Change Customer Information
(b) Change Security Question Answer