Full title: FLIR AX8 1.46.16 Traversal / Access Control / Command Injection / XSS Vulnerabilities Category: web applications Platform: php FLIR AX8 versions 1.46.16 and below suffer from command injection, directory traversal, improper access control, and cross site scripting vulnerabilities. # 0day.today @ http://0day.today/