Mstir

A critical issue has been found in the software, affecting some unknown functionality of the file /crm/wechatSession/index.php?msgid=1&operation=upload. The manipulation of the `file` argument leads to unrestricted upload. This issue can be exploited remotely.

A problematic issue was found in Lingdang CRM, affecting an unknown part of the file /crm/data/pdf.php. The manipulation of the `url` argument with the input ../config.inc.php leads to path traversal. This issue can be initiated remotely.

A critical issue was found in the software, affecting an unknown functionality of the file /crm/WeiXinApp/marketing/index.php?module=Users&action=getActionList. The manipulation of the `userid` argument leads to SQL injection. This issue can be exploited remotely.

A critical issue was found in an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/image upload.php. The manipulation of the `files` argument leads to unrestricted upload. It is possible to launch the attack remotely. The issue has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue has been found, affecting the `curl exec` function in the file `/App/Core/Extend/Function/ydLib.php`. The manipulation of the `url` argument leads to server-side request forgery. This issue can be exploited remotely. The vendor was contacted about this issue but did not respond.

A critical issue was found in the function `dataAction` of the file `/webmain/task/openapi/openmodhetongAction.php`. The manipulation of the argument `nickName` leads to sql injection. The attack can be initiated remotely. The issue has been publicly disclosed and may be exploited. The vendor was contacted about this disclosure but did not respond.

A problematic issue has been found in the processing of the file "/t.php?action=phpinfo", leading to information disclosure. The attack can be initiated remotely. The vendor was contacted about this disclosure but did not respond.

A critical issue has been found in the HTTP POST Request Handler component, specifically in the file /admin/config time sync.php. The manipulation of the `ntp server` argument leads to os command injection. This issue can be exploited remotely.