Jobyer Ahmed

توجد مشكلة تتعلق بالتحميل غير المقيد في مكون ”صفحة الإدراج“ بمكتبة الوسائط. يمكن لمهاجم عن بُعد استغلال هذه الثغرة من خلال التلاعب بالمعلمة `qqfilename` داخل الدالة `FileLibraryController::storeFile()` الموجودة في الملف `src/Http/Controllers/Admin/FileLibraryController.php`.

توجد مشكلة تتعلق بالتفويض غير السليم في مكون واجهة برمجة التطبيقات (API) داخل الدالة `Setting::saveSetting()`. تسمح هذه الثغرة لمهاجم عن بُعد بالتلاعب بالإعدادات بسبب عدم كفاية عمليات التحقق من التفويض.

يحدث خطأ في عملية المصادقة داخل مكون نقطة نهاية JSON-RPC عند التلاعب بالمعلمة `role` في الدالتين `editUser()` أو `addUser()`. وهذا يسمح لمهاجم عن بُعد بتجاوز ضوابط المصادقة.

يوجد ثغرة في آلية تجاوز التفويض في مكون Tenant Handler داخل الدالة `Clients::project()` في الملف `application/controllers/Clients.php`. يمكن لمهاجم عن بُعد استغلال هذه الثغرة من خلال التلاعب بالمعلمة `ID`.

يسمح ثغرة في نقطة نهاية Admin Kanban بإجراء حقن SQL عن بُعد، وهي تقنية يتم من خلالها إدراج عبارات SQL ضارة في حقول الإدخال لتنفيذها. توجد المشكلة في الدالة `AbstractKanban::applySortQuery()` الموجودة في الملف `application/services/AbstractKanban.php`، وتنتج تحديدًا عن التلاعب بالمعلمة `this`.

تم اكتشاف ثغرة أمنية في CodeCanyon Perfex CRM. وقد تم تصنيفها على أنها مشكلة. تتأثر وظيفة غير معروفة في الملف /perfex/clients/project/2 التابع لمكون «وحدة مناقشات المشروع». يؤدي التلاعب بـ `argument description` إلى حدوث هجوم عبر المواقع (Cross-Site Scripting). يمكن شن الهجوم عن بُعد. تم الكشف عن الاستغلال للجمهور ويمكن استخدامه.

Name of the Vulnerable Software and Affected Versions: CodeCanyon CRMGo SaaS versions up to 7.2 Description: A problematic issue has been found in the software, affecting some unknown processing of the file "/project/task/{task id}/show". The manipulation of the `comment` argument leads to cross-site scripting. The attack may be initiated remotely. Recommendations: For versions up to 7.2, consider disabling access to the "/project/task/{task id}/show" endpoint until a patch is available. Restrict the use of the `comment` argument in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: CodeCanyon CRMGo SaaS version 7.2 Description: A problematic vulnerability was found in CodeCanyon CRMGo SaaS, affecting the file "/deal/{note id}/note". The manipulation of the `notes` argument leads to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. An attacker can inject scripts via the `notes` parameter. Recommendations: For CodeCanyon CRMGo SaaS version 7.2, patch immediately and validate user input to prevent exploitation. As a temporary workaround, consider restricting access to the "/deal/{note id}/note" endpoint until a patch is available. Avoid using the `notes` parameter in the affected endpoint until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: CodeCanyon RISE Ultimate Project Manager version 3.7.0 Description: A critical issue has been identified, affecting the /index.php/dashboard/save file. The `id` argument is susceptible to SQL injection, allowing for remote attacks. Recommendations: For CodeCanyon RISE Ultimate Project Manager version 3.7.0, it is recommended to upgrade the affected component to a newer version to mitigate the risk of SQL injection. As a temporary workaround, consider restricting access to the /index.php/dashboard/save endpoint until a patch is available. Avoid using the `id` argument in the affected endpoint until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Perfex CRM version 3.1.6 Description: A problem exists in the file application/controllers/Clients.php of the component Parameter Handler. The manipulation of the `message` argument leads to cross-site scripting. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. Recommendations: For Perfex CRM version 3.1.6, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the vulnerable `message` parameter in the affected API endpoint until a patch is available.

Name of the Vulnerable Software and Affected Versions: QDocs Smart School Management System version 7.0.0 Description: A critical vulnerability was found in the QDocs Smart School Management System. The issue affects an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument `users[]` with a specific input as part of a POST request parameter leads to SQL injection. The attack can be launched remotely. Recommendations: For QDocs Smart School Management System version 7.0.0, upgrade to version 7.0.1 to address this issue. As a temporary workaround, consider restricting access to the vulnerable Chat component until the upgrade is applied. Avoid using the `users[]` argument in the affected API endpoint until the issue is resolved.