docuFORM Managed Print Service Client vulnerabilities

docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.

docuFORM Managed Print Service Client 11.11c is vulnerable to reflected cross-site scripting via the application's login page.

docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. An attacker could upload malicious files to the server.

docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the application's login page. An attacker can force a session identifier on the victim, which is then authenticated.