Primoris Software Officeflow vulnerabilities

• primoris software officeflow SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to... CVE-2006-2954 7.5 HighJune 12, 2006
• primoris software officeflow Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows... CVE-2006-2953 4.3 MediumJune 12, 2006