PhpOutsourcing Noah’s Classified 1.3 and below suffers from XSS and full path disclosure vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44889/NoahsClassified.txt
Source: https://packetstormsecurity.com/files/44889/NoahsClassified.txt.html