Aung Khant

**Name of the Vulnerable Software and Affected Versions** PHPShop versions prior to 0.8.2 **Description** The issue is related to a Cross-Site Scripting (XSS) problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control. **Recommendations** For PHPShop versions prior to 0.8.2, update to version 0.8.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! version 1.6.0 **Description** The issue is related to SQL Injection via the `filter order` and `filer order Dir` parameters. This allows for potential exploitation. **Recommendations** For Joomla! version 1.6.0, consider restricting access to the parameters `filter order` and `filer order Dir` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** bbPress versions 1.0.0 through 1.0.2 **Description** The issue concerns a cross-site scripting (XSS) flaw in the /bb-login.php URL, specifically via the `re` parameter. This allows for potential malicious script injection. No information is provided about the estimated number of affected devices or real-world incidents. **Recommendations** For bbPress versions 1.0.0 through 1.0.2, consider disabling access to the /bb-login.php URL or restricting the use of the `re` parameter until a fix is available. Avoid using the `re` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Vanilla Forums versions 2.0.17.1 through 2.0.17.5 **Description** The issue is related to a cross-site scripting (XSS) vulnerability. It affects the /vanilla/index.php endpoint via the `p` parameter. **Recommendations** For versions 2.0.17.1 through 2.0.17.5, consider restricting access to the /vanilla/index.php endpoint or avoid using the `p` parameter until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Advanced Electron Forums (AEF) versions 1.0.0 through 1.0.9 **Description** A Cross-site Request Forgery (CSRF) issue exists due to inadequate confirmation for sensitive transactions in the administrator functions. **Recommendations** For versions 1.0.0 through 1.0.9, consider implementing proper confirmation mechanisms for sensitive transactions in administrator functions to mitigate the risk of exploitation. As a temporary workaround, restrict access to administrator functions until a proper fix is applied.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 1.7.0 **Description** Multiple Cross-site Scripting (XSS) vulnerabilities exist in the index.php file, specifically in the `search word`, `extension`, `asset`, and `author` parameters. This issue allows for potential exploitation through these parameters in the "/index.php" endpoint. **Recommendations** For versions prior to 1.7.0, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the vulnerable parameters `search word`, `extension`, `asset`, and `author` in the index.php file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WebsiteBaker versions 2.8.1 and earlier **Description** A Cross Site Request Forgery (CSRF) issue exists in the administrator functions due to inadequate confirmation for sensitive transactions. **Recommendations** For versions 2.8.1 and earlier, consider implementing additional confirmation steps for sensitive transactions to mitigate the risk of CSRF attacks. As a temporary workaround, restrict access to administrator functions until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Jcow CMS versions 4.2 and earlier **Description** A Cross-Site Scripting (XSS) issue exists in the `g` parameter to "index.php" in Jcow CMS. **Recommendations** For Jcow CMS versions 4.2 and earlier, consider disabling access to the "index.php" endpoint until a fix is available, or restrict the use of the `g` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jcow CMS versions 4.x through 4.2 Jcow CMS versions 5.2 **Description** A Code Execution issue exists in the `attachment` parameter to "index.php" in Jcow CMS. **Recommendations** For Jcow CMS versions 4.x through 4.2, avoid using the `attachment` parameter in the "index.php" endpoint until a fix is available. For Jcow CMS version 5.2, consider restricting access to the "index.php" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** WebsiteBaker versions 2.8.1 and earlier **Description** An Arbitrary File Upload issue exists due to a failure to restrict uploaded files with certain extensions, such as `.htaccess`, `.php4`, `.php5`, and `.phtl`. This issue is related to the `admin/media/upload.php` file. **Recommendations** For versions 2.8.1 and earlier, restrict the upload of files with `.htaccess`, `.php4`, `.php5`, and `.phtl` extensions in the `admin/media/upload.php` file to prevent arbitrary file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Concrete CMS versions 5.4.1.1 and earlier **Description** A Cross-Site Scripting (XSS) issue exists in the `rcID` parameter. **Recommendations** For versions 5.4.1.1 and earlier, avoid using the `rcID` parameter in affected API endpoints until the issue is resolved. As a temporary workaround, consider restricting access to the `rcID` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Elgg versions prior to 1.7.11 **Description** The issue is related to a SQL injection vulnerability. **Recommendations** For Elgg versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Elgg versions prior to 1.7.11 **Description** The issue arises from improper sanitization of the `internalname` parameter, allowing an attacker to conduct a Cross Site Scripting attack. This could enable an attacker to create a specially crafted URL that executes arbitrary script code in a victim's browser. **Recommendations** For Elgg versions prior to 1.7.11, as a temporary workaround, consider restricting access to the `internalname` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CelFrame Office 2008 Standard Edition **Description** The issue allows local users to gain privileges via a Trojan horse `java msci.dll` or `msci java.dll` file in the current working directory. This can be demonstrated by a directory that contains a .doc, .xls, or .odg file. **Recommendations** For CelFrame Office 2008 Standard Edition, consider restricting access to untrusted search paths to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain untrusted files, especially those with .doc, .xls, or .odg extensions, until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ALSee version 6.20.0.1 **Description** The issue allows local users to gain privileges via a Trojan horse `patchani.dll` file in the current working directory. This can be demonstrated by a directory containing specific file types, including `.ani`, `.bmp`, `.cal`, `.hdp`, `.jpe`, `.mac`, `.pbm`, `.pcx`, `.pgm`, `.png`, `.psd`, `.ras`, `.tga`, or `.tiff` files. **Recommendations** For ALSee version 6.20.0.1, consider restricting access to the `patchani.dll` file to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain the aforementioned file types until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** e-press ONE Office Author (affected versions not specified) **Description** The issue allows local users to gain privileges through multiple untrusted search path vulnerabilities. This can be achieved by placing a Trojan horse `java msci.dll` or `msci java.dll` file in the current working directory, particularly in a directory that contains a `.psw` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open-Realty CMS versions 2.5.8 and earlier **Description** A directory traversal issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `select users template` parameter to the "index.php" endpoint. **Recommendations** For Open-Realty CMS versions 2.5.8 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kingsoft Office 2010 version 6.6.0.2477 **Description** The issue concerns untrusted search path vulnerabilities in multiple components of Kingsoft Office 2010, including Presentation, Writer, and Spreadsheets. This allows local users to gain privileges by placing a Trojan horse `plgpf.dll` file in the current working directory, potentially exploiting the vulnerability when the directory contains specific file types such as .xls, .ppt, .rtf, or .doc. **Recommendations** For Kingsoft Office 2010 version 6.6.0.2477, consider removing or restricting access to the `plgpf.dll` file in the current working directory to minimize the risk of exploitation. Additionally, avoid opening files from untrusted sources, especially in directories that may contain malicious `plgpf.dll` files, until a patch or fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Lotus Symphony version 1.3.0 20090908.0900 **Description** The issue allows local users to gain privileges via a Trojan horse `eclipse 1114.dll` or `emser645mi.dll` file in the current working directory. This can be demonstrated by a directory that contains a file with certain extensions, such as `.odm`, `.odt`, `.otp`, `.stc`, `.stw`, `.sxg`, or `.sxw`. **Recommendations** For IBM Lotus Symphony version 1.3.0 20090908.0900, consider removing or restricting access to the `eclipse 1114.dll` and `emser645mi.dll` files to minimize the risk of exploitation. Additionally, avoid executing files from untrusted directories to reduce the risk of privilege escalation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Etano versions 1.22 and earlier **Description** The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to multiple scripts, including `join.php`, `search.php`, `photo search.php`, and `photo view.php`. The vulnerable parameters include `user`, `email`, `email2`, `f17 zip`, `agree`, `PATH INFO`, `st`, `f17 city`, `f17 country`, `f17 state`, `f19`, `wphoto`, `search`, `v`, and `return`. **Recommendations** For Etano versions 1.22 and earlier, as a temporary workaround, consider restricting access to the affected scripts until a patch is available. Avoid using the vulnerable parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.