P.K. Hsu

**Name of the Vulnerable Software and Affected Versions** EasyFlow .NET (affected versions not specified) **Description** Stored Cross-Site Scripting allows authenticated remote attackers to inject persistent JavaScript code that is executed in the browsers of other users when a page loads. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EasyFlow .NET (affected versions not specified) **Description** A session fixation issue exists where unauthenticated remote attackers can replace a specific session ID for a user. This allows the attacker to gain the user's privileges after the user successfully logs in. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.