Wang Jing

The issue allows for CSRF attacks via specific API endpoints, including "portalchannel ajax.php" with `id` or `code` parameters, and "admin.php" with a `fileids` parameter.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `order by` parameter in the groups.php file.

The issue allows remote attackers to obtain the installation path. This is achieved via the `c` parameter to the "index.php" endpoint.

The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the `url` parameter. This can be exploited by including a malicious URL in the `url` parameter, potentially leading to phishing attacks.