Full title: Crime24 Stealer Panel <= Multiple Vulnerabilities 
Category: web applications
Platform: windows
An attacker can execute an XSS and inject sql commands in the search form.

# 0day.today @ http://0day.today/