匿名

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `FileManager.editFile()` function in the `modules/filemanager/FileManagerController.java` component. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `FileManager.editFile()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information or cause a denial of service. This is achieved via the `FileManager.delete()` function in the component `modules/filemanager/FileManagerController.java`. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `FileManager.delete()` function until a patch is available. Restrict access to the `modules/filemanager/FileManagerController.java` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `TemplatePath` parameter in the component "jfinal cms/admin/folder/list". Recommendations: For Jfinal CMS versions 4.7.1 and earlier, consider restricting access to the "jfinal cms/admin/folder/list" component until a patch is available. As a temporary workaround, avoid using the `TemplatePath` parameter in this component to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `getFolder()` function in the component `/modules/filemanager/FileManager.java`. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `getFolder()` function until a patch is available. Restrict access to the `/modules/filemanager/FileManager.java` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to execute arbitrary code via the `Nickname` parameter in the component "/jfinal cms/front/person/profile.html". This is a Cross Site Scripting (XSS) issue. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider restricting access to the "/jfinal cms/front/person/profile.html" component until a patch is available. Avoid using the `Nickname` parameter in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Rockoa version 1.8.7 Description: The issue allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php. This can be exploited by sending crafted requests to the vulnerable endpoint, potentially allowing attackers to elevate their privileges. Recommendations: For Rockoa version 1.8.7, consider restricting access to the wordAction.php file until a patch is available. As a temporary workaround, avoid using the vulnerable parameters in the wordAction.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider files with alternative data streams, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadVideo" URI.

A command execution issue exists in OFCMS. This issue can be exploited via a template file using the `freemarker.template.utility.Execute` function, allowing an attacker to execute arbitrary commands. The exploitation involves using the `${ ex("}` syntax followed by the command.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the "admin/ueditor/uploadScrawl" URI.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file extensions, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadFile" URI.

An issue in OFCMS allows SQL injection, related to the SystemGenerateController.java file. This is specifically exploitable through the "admin/system/generate/create" API endpoint with the `sql` parameter.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file extensions, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadImage" URI.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the "admin/comn/service/editUploadImage" URI.

An issue was discovered related to directory traversal. This issue is connected to the `getTemplates` function in `TemplateController.java` and can be exploited through the "/admin/cms/template/getTemplates.html" API endpoint with specific parameters such as `res path` and `up dir`.

An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the `dir` parameter. This enables writing arbitrary content, specified in the `file content` parameter, into an arbitrary file, defined by the `file name` parameter. The issue is related to the `save` function in `TemplateController.java`.

An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the admin/comn/service/upload URI.

The issue is related to a SQL injection in the `userbank` parameter.

The issue allows for an arbitrary file upload, which can be exploited by an attacker.