Jing

تم تحديد مشكلة حرجة تؤثر على وظيفة `updateUserInfo` في الملف `/personal/updateInfo` ضمن المكون `com.siro.mall.controller.mall.UserController`. يؤدي التلاعب بالمعلمة `userId` إلى ضعف ضوابط الوصول. يمكن استغلال هذه المشكلة عن بُعد. وقد تم الكشف عن طريقة الاستغلال علنًا ويمكن استخدامها.

A critical issue has been found in the code of the file /admin/tag.php, where the manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely.

A critical issue affects the processing of the file /admin/apply.php. The manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely.

A critical issue was found in LyLme spage, affecting an unknown function of the file /admin/sou.php. The manipulation of the `id` argument leads to SQL injection. This issue can be exploited remotely.