Francisco Javier Santiago Vázquez

**Nome do software vulnerável e versões afetadas** ACS Advanced Comment System versão 1.0 **Descrição** A vulnerabilidade permite o acesso a diretórios (Directory Traversal) por meio do endpoint da API `advanced component system/index.php`, especificamente através da variável `ACS path`. Isso pode ser explorado manipulando a variável `ACS path` com um URI como `..%2f`. **Recomendações** Para o ACS Advanced Comment System versão 1.0, como solução temporária, considere restringir o acesso ao endpoint da API `advanced component system/index.php` até que um patch esteja disponível. Evite usar a variável `ACS path` neste endpoint para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha uma correção para este problema.

Name of the Vulnerable Software and Affected Versions: SyncBreeze versions 10.1 through 10.7 Description: The issue is an XSS that affects SyncBreeze. Recommendations: For versions 10.1 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskPulse Enterprise versions 10.4 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 10.4 through 10.7, update to a version later than 10.7 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: DiskSavvy Enterprise versions 10.4 through 10.7 Description: A cross-site scripting (XSS) issue exists. Recommendations: For versions 10.4 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskBoss Enterprise versions 7.4.28 through 9.1.16 Description: The issue is related to a Cross-Site Scripting (XSS) problem. Recommendations: For versions 7.4.28 through 9.1.16, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Flexense VX Search Enterprise versions 10.1.12 through 10.7 Description: A cross-site scripting (XSS) issue exists. Recommendations: For versions 10.1.12 through 10.7, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: DiskSorter Enterprise versions 9.5.12 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 9.5.12 through 10.7, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Flexense DupScout Enterprise versions 10.0.18 through 10.7 Description: A cross-site scripting issue exists. Recommendations: For versions 10.0.18 through 10.7, update to a version that contains a fix for this issue.