Revenue Collection System version 1.0 suffers from a persistent cross site scripting vulnerability allowing an authenticated client user to add an administrative user account to the application then log in as the newly created admin.
c480b839cfd03e90fa43402bbfa8f8ab4dc9db4461d292dd292b3383bf3c5995