David_12

A remote cross site scripting issue exists within the Public Password Reset Endpoint component. The flaw occurs in the `/forgotpasswd.html` endpoint when the `email` argument is manipulated. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the `imgFile` argument allows for cross-site scripting, a technique where malicious scripts are injected into trusted websites.

An issue exists in the WebSocket Service component where improper processing of the `/index.html` endpoint allows remote attackers to bypass authentication.

A remote SQL injection is possible due to improper handling of the `ID` argument within an unknown function of the '/pages/pro del.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

من الممكن إجراء حقن SQL عن بُعد بسبب المعالجة غير الصحيحة للمعلمة `delid` داخل نقطة النهاية `/viewbilling.php`. حقن SQL هو تقنية يقوم فيها المهاجم بإدراج كود SQL ضار في استعلام، مما يتيح له التلاعب بقاعدة البيانات.