Xiaotian.Wang

**Name of the Vulnerable Software and Affected Versions** D-Link Central WiFi Manager CWM(100) versions prior to v1.03R0100 BETA6 **Description** The issue is related to the lack of protection against SQL query structure exploitation in the /web/Public/Conn.php component. This allows a remote attacker to execute arbitrary code. The problem arises because input is not validated, enabling arbitrary SQL statements to be executed in the database via the `dbSQL` parameter in the /web/Public/Conn.php endpoint. **Recommendations** For versions prior to v1.03R0100 BETA6, update to version v1.03R0100 BETA6 or later to resolve the issue. As a temporary workaround, consider restricting access to the /web/Public/Conn.php endpoint to minimize the risk of exploitation. Avoid using the `dbSQL` parameter in the affected endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Zoho ManageEngine Netflow Analyzer versions prior to build 123137 Zoho ManageEngine Network Configuration Manager versions prior to build 123128 Zoho ManageEngine OpManager versions prior to build 123148 Zoho ManageEngine OpUtils versions prior to build 123161 Zoho ManageEngine Firewall Analyzer versions prior to build 123147 **Description** A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `operation` parameter to the "/servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet" API endpoint. **Recommendations** For Zoho ManageEngine Netflow Analyzer versions prior to build 123137, update to build 123137 or later. For Zoho ManageEngine Network Configuration Manager versions prior to build 123128, update to build 123128 or later. For Zoho ManageEngine OpManager versions prior to build 123148, update to build 123148 or later. For Zoho ManageEngine OpUtils versions prior to build 123161, update to build 123161 or later. For Zoho ManageEngine Firewall Analyzer versions prior to build 123147, update to build 123147 or later. As a temporary workaround, consider restricting access to the "/servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet" API endpoint and avoid using the `operation` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Zoho ManageEngine Desktop Central version 10.0.255 **Description** The issue allows attackers to delete certain files on the web server without login by sending a specially crafted request to the server. This is achieved by including a `computerName=../` substring in the request to the "/agenttrayicon" API endpoint. **Recommendations** For Zoho ManageEngine Desktop Central version 10.0.255, consider restricting access to the AgentTrayIconServlet to prevent unauthorized file deletion until a patch is available. As a temporary workaround, avoid using the `computerName` variable in the affected API endpoint.

**Name of the Vulnerable Software and Affected Versions** PHP Scripts Mall Schools Alert Management Script (affected versions not specified) **Description** The issue concerns Arbitrary File Upload and Remote Code Execution in PHP Scripts Mall Schools Alert Management Script. This is achieved through the `$ FILE` variable in the `/webmasterst/general.php` endpoint, allowing an attacker to upload a .php file with the image/jpeg content type. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cacti version 1.1.12 **Description** A cross-site scripting (XSS) issue exists, allowing remote anonymous users to inject arbitrary web script or HTML. This is related to the `die html input error` function in `lib/html validate.php` and is exploited via the `id` parameter in `link.php`. **Recommendations** For Cacti version 1.1.12, consider restricting access to the `link.php` file until a patch is available, and avoid using the `id` parameter in this context to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cacti versions 0.8.8f and earlier **Description** The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by sending crafted serialized data in the `selected graphs array` parameter in a save action, exploiting the `host new graphs save` function in `graphs new.php`. **Recommendations** For versions 0.8.8f and earlier, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the `host new graphs save` function in `graphs new.php` to minimize the risk of exploitation. Avoid using the `selected graphs array` parameter in the affected save action until the issue is resolved.