Wiki

تم اكتشاف ثغرة أمنية خطيرة في منصة الإدارة المتكاملة للوسائط السمعية والبصرية التابعة لمجموعة Gosuncn Technology Group، تؤثر على وظيفة غير معروفة في الملف /sysmgr/user/listByPage. يؤدي استغلال هذه الثغرة إلى تسرب المعلومات ويمكن تنفيذه عن بُعد. وقد تم الكشف عن هذه الثغرة للجمهور وقد يتم استغلالها. تم الاتصال بالمورد بشأن هذا الكشف، لكنه لم يرد.

تم تحديد مشكلة في البرنامج تؤثر على بعض العمليات غير المعروفة. يؤدي استغلال هذه المشكلة إلى ضعف متطلبات كلمة المرور. يمكن شن الهجوم عن بُعد. تعتبر درجة تعقيد الهجوم عالية نسبيًا، كما يُعرف أن استغلال الثغرة صعب.

تم تحديد مشكلة في مكون معالجة ملفات التكوين، وتحديدًا في الملف /config/config.properties، مما أدى إلى تسرب المعلومات. ويمكن استغلال هذه الثغرة عن بُعد. تم الإعلان عن هذه المشكلة علنًا.

تم اكتشاف ثغرة أمنية خطيرة في youyiio BeyongCms. تؤثر المشكلة على وظيفة غير معروفة في الملف /admin/theme/Upload.html التابع لمكون «صفحة إدارة المستندات». يؤدي التلاعب بالمعلمة `File` إلى تحميل ملفات دون قيود. يمكن شن الهجوم عن بُعد. وقد تم الكشف عن الاستغلال للجمهور ويمكن استخدامه.

تم تحديد مشكلة حرجة تؤثر على وظيفة `updateUserInfo` في الملف `/personal/updateInfo` ضمن المكون `com.siro.mall.controller.mall.UserController`. يؤدي التلاعب بالمعلمة `userId` إلى ضعف ضوابط الوصول. يمكن استغلال هذه المشكلة عن بُعد. وقد تم الكشف عن طريقة الاستغلال علنًا ويمكن استخدامها.

A critical issue has been found in the AMTT Hotel Broadband Operation System. It affects an unknown function of the file /manager/frontdesk/online status.php. The manipulation of the `AccountID` argument leads to sql injection. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

A vulnerability was found in the processing of the file /language.php, where the manipulation of the arguments `LangID`, `LangName`, and `LangEName` leads to cross-site scripting. The attack may be initiated remotely. The vendor was contacted about this disclosure but did not respond.

A critical vulnerability was found in the software, affecting unknown code of the file /interlib/order/BatchOrder?cmdACT=admin order&xsl=adminOrder OrderList.xsl. The manipulation of the `bookrecno` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue has been found in the Interlib Library Cluster Automation Management System, affecting an unknown part of the file `/interlib/admin/SysLib?cmdACT=inputLIBCODE&mod=batchXSL&xsl=editLIBCODE.xsl&libcodes=&ROWID=`. The manipulation of the `sql` argument leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A critical issue was found in the URL Handler component, specifically affecting the `/api/sys/ng-alain/getDictItemsByTable/` API endpoint. This issue leads to sql injection and can be initiated remotely. The exploit has been disclosed publicly.

A critical issue affects the processing of the file /admin/apply.php. The manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely.

A critical issue has been found in the code of the file /admin/tag.php, where the manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely.

A critical issue was found in LyLme spage, affecting an unknown function of the file /admin/sou.php. The manipulation of the `id` argument leads to SQL injection. This issue can be exploited remotely.

A critical issue has been found in the Administrator Backend component, specifically in the function `upload domain verification file` of the file `WxkConfig.php`. The manipulation of the argument `domain verification file` leads to unrestricted upload. This issue can be exploited remotely.

Name of the Vulnerable Software and Affected Versions: xiaohe4966 TpMeCMS versions 1.3.3.1 and earlier Description: A problematic issue has been found in xiaohe4966 TpMeCMS, affecting some unknown functionality of the file "/index/ajax/lang". The manipulation of the `lang` argument leads to path traversal. The attack may be launched remotely. Recommendations: For xiaohe4966 TpMeCMS versions 1.3.3.1 and earlier, upgrade to version 1.3.3.2 to address this issue. As a temporary workaround, consider restricting access to the "/index/ajax/lang" file until the upgrade is applied. Avoid manipulating the `lang` argument in the affected file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Yunke Online School System versions up to 3.0.6 Description: A vulnerability was found in the Yunke Online School System, affecting the `downfile` function of the file `application/admin/controller/Appadmin.php`. The manipulation of the `url` argument leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Recommendations: For versions up to 3.0.6, as a temporary workaround, consider disabling the `downfile` function until a patch is available. Restrict access to the `application/admin/controller/Appadmin.php` file to minimize the risk of exploitation. Avoid using the `url` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System version 5.6.2 Description: A critical issue was found in the system, affecting the `GetDataKindByType` function of the file `/DataSrvs/UCCGSrv.asmx`. This issue leads to sql injection and can be exploited remotely. The exploit has been disclosed to the public. Recommendations: For version 5.6.2, as a temporary workaround, consider disabling the `GetDataKindByType` function until a patch is available. Restrict access to the `/DataSrvs/UCCGSrv.asmx` file to minimize the risk of exploitation. Avoid using parameters that may lead to sql injection in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Yunke Online School System versions up to 1.5.5 Description: A vulnerability was found in the Yunke Online School System, affecting the file `/admin/educloud/videobind.html`. This issue leads to the inclusion of sensitive information in the source code and can be initiated remotely. The complexity of an attack is rather high, and the exploitation appears to be difficult. Recommendations: For versions up to 1.5.5, upgrade to version 1.5.6 to address this issue. As a temporary workaround, consider restricting access to the `/admin/educloud/videobind.html` file until the upgrade is applied.

A problematic issue exists in FastAdmin related to improper path restriction within the `/index/ajax/lang` component. This allows for path traversal, potentially enabling remote attackers to access sensitive information. The issue affects an unknown functionality within the `/index/ajax/lang` file, where manipulation of the `lang` parameter can lead to unauthorized data access. Reports indicate that approximately 14,000 instances may be affected yearly. Exploitation of this issue has been publicly disclosed and is being actively used to retrieve database details. The **API endpoint** `/index/ajax/lang` is involved, and the `lang` parameter is a **vulnerable parameter**.

A vulnerability has been found in the software, classified as problematic, and affects an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access controls. The attack can be launched remotely.