Full title: UniCredit Bank CSRF / XSS / Shell Upload Vulnerabilities Category: web applications Platform: php UniCredit Bank suffers from cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. They have not responded to the authors notifications. # 0day.today @ http://0day.today/