Kmkz_Security

An issue was discovered where the login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage the `downloadDocServer()` function to traverse the file system and access files or directories that are outside of the restricted directory. This is possible because `WealthT24/GetImage` is used with the `docDownloadPath` and `uploadLocation` parameters.

An issue in the secure portal of Publisure allows an authenticated administrator to inject arbitrary PHP code using the adminCons.php form. The injected code is stored in the E:PUBLISUREwebservicewebpagesAdminDirTemplates folder, and it remains even if removed from the adminCons.php view, potentially allowing the rogue PHP file to be hidden.

An issue in the servlet controller of the secure portal allows authentication bypass, enabling unauthorized queries on PHP forms within the /AdminDir folder, which should be restricted.

An issue in the secure portal of Publisure allows for SQL injections due to poorly sanitized SQL queries in the `userAccFunctions.php` file. This enables an attacker to access passwords and potentially grant access to the user account, escalating privileges to become an Administrator.