Adhikara13

The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms save poc settings, dtlms save skin settings, and dtlms save options settings) in versions up to, and including, 1.1. These handlers are registered on the wp ajax nopriv * hook and contain no capability check, no nonce verification, and pass user-supplied data directly to update option(). This makes it possible for unauthenticated attackers to overwrite arbitrary plugin option values stored in the wp options table, including Point-of-Contact email configuration and skin/branding settings, which can be used to alter the appearance and behavior of the LMS for all site visitors.

The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce guarding the unauthenticated booked add appt AJAX action is publicly embedded on any page rendering the booking calendar shortcode, making it trivially obtainable by unauthenticated attackers without any prior account or privilege.

**Name of the Vulnerable Software and Affected Versions** SEOWP versions prior to 3.12.3 **Description** An unauthenticated Cross Site Request Forgery (CSRF) issue exists, which can lead to Stored Cross-Site Scripting (XSS). CSRF is a flaw that allows an attacker to trick a victim into performing actions they did not intend to take, while Stored XSS occurs when a malicious script is permanently stored on the target server and executed in the browser of users who visit the affected page. **Recommendations** Update SEOWP to a version newer than 3.12.2.

**Name of the Vulnerable Software and Affected Versions** Spexo theme for WordPress versions prior to 2.0.12 **Description** Unauthorized access is possible due to a missing capability check in the `activate plugin()` function. This allows authenticated users with Subscriber-level permissions or higher to activate a limited set of plugins. **Recommendations** Update the Spexo theme to version 2.0.12 or later. As a temporary mitigation, restrict user roles to prevent Subscriber-level accounts from accessing functions related to plugin activation.

**Name of the Vulnerable Software and Affected Versions** JobSearch versions prior to 3.2.8 **Description** Unauthenticated Broken Access Control allows an attacker to bypass authorization restrictions without providing valid credentials. **Recommendations** Update to a version newer than 3.2.7.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is a buffer overflow that can be triggered via the `pingWdogIp`. This allows attackers to cause a Denial of Service (DoS) by providing a crafted input. **Recommendations** For version 1.0.1.865, consider restricting access to the `pingWdogIp` to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered via the `ddnsDomainName` parameter in the Dynamic DNS settings. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world incidents. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider restricting access to the Dynamic DNS settings to minimize the risk of exploitation. Avoid using the `ddnsDomainName` parameter in the affected settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered in the Wake-On-LAN (WoL) function via the `wakeup mac` parameter. This issue can be exploited using a crafted payload. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider disabling the Wake-On-LAN (WoL) function until a patch is available to prevent exploitation via the `wakeup mac` parameter.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is related to a command injection vulnerability. This vulnerability can be exploited via a crafted payload, specifically through the `Hostname` parameter within the WAN settings. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider restricting access to the WAN settings to minimize the risk of exploitation. Avoid using the `Hostname` parameter in the WAN settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is related to a command injection vulnerability in the Changing Username and Password function. This vulnerability can be exploited via a crafted payload. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider disabling the Changing Username and Password function until a patch is available. Restrict access to this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered in the diagnostic tools page of the affected software. This issue can be exploited through a crafted HTTP request. **Recommendations** For version 1.0.1.865, consider restricting access to the diagnostic tools page until a patch is available. As a temporary workaround, avoid using the diagnostic tools page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETIS SYSTEMS WF2409E version 3.6.42541 **Description** An issue in the diagnostic tools component of the admin management interface allows a remote attacker to execute arbitrary code via the `ping` and `traceroute` functions. **Recommendations** For NETIS SYSTEMS WF2409E version 3.6.42541, consider disabling the diagnostic tools component in the admin management interface until a patch is available. Restrict access to the `ping` and `traceroute` functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.