Hai Dang Long

An issue in the Armor module allows SQL injection with an authenticated session. This occurs because input passed through the `code` parameter in certain pages, such as "collaterals/colexe3t.jsp", "/references/refsuppu.jsp", and "/references/refbranu.jsp", is mishandled before being used in SQL queries.

A reflected XSS issue exists in the Core and Portal modules, which can be exploited with an authenticated session. The issue is related to the `Customerid`, `formName`, `FrameId`, or `MODE` parameters.

An issue was discovered in the Armor module, allowing CSRF to occur via the "/CollatWebApp/gcmsRefInsert?name=SUPP" URI.

An issue exists in the Core and Portal modules, where an open redirect is possible via the "/IntellectMain.jsp?IntellectSystem=" URI.

The issue concerns a session fixation problem via the `JSESSIONID` parameter.