Bit Assist

Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter vulnerability <= 1.5.2

Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function vulnerability <= 1.5.2

Authenticated (Subscriber+) SQL Injection via id Parameter vulnerability <= 1.5.2

Cross Site Scripting (XSS) vulnerability <= 1.1.9

Authenticated (Administrator+) Stored CrossSite Scripting vulnerability < 1.2