Chenshiyi

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** A flaw in the KCFinder File Manager component allows remote attackers to perform unrestricted file uploads. This occurs through the manipulation of the `ADMIN RS KCFINDER` argument within the `cekUserLogin()` function located in the `application/models/app user login model.php` file. **Recommendations** As a temporary workaround, restrict access to the `cekUserLogin()` function in the `application/models/app user login model.php` file or avoid using the `ADMIN RS KCFINDER` argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** A remote path traversal flaw exists in the Endpoint component. The issue occurs within the `hapus()` function located in the `application/modules/admin/controllers/data galeri.php` file. An attacker can trigger this by manipulating the `gbr` argument, allowing unauthorized access to files or directories on the server. **Recommendations** As a temporary workaround, restrict access to the `hapus()` function in the `application/modules/admin/controllers/data galeri.php` file or avoid using the `gbr` argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** A remote authorization bypass exists in the `detail()` function within the `application/modules/admin/controllers/laporan data pasien.php` file. This issue occurs when the `id param` argument is manipulated, allowing an attacker to bypass security checks. **Recommendations** As a temporary workaround, restrict access to the `detail()` function in the `application/modules/admin/controllers/laporan data pasien.php` file or avoid using the `id param` argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** A remote information disclosure issue exists within the HTTP Response component. The problem resides in the `error reporting()` function located in the `index.php` file, where improper manipulation allows an attacker to expose sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** An improper authorization issue exists in the Configuration Handler component. A remote attacker can manipulate the `tipe`, `title`, or `content setting` arguments within the `simpan()` function of the `application/modules/admin/controllers/sistem.php` file to bypass authorization controls. **Recommendations** As a temporary workaround, restrict access to the `simpan()` function in the `application/modules/admin/controllers/sistem.php` file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 **Description** A flaw in the Guest Book component allows remote exploitation via cross site scripting (XSS), a technique where malicious scripts are injected into trusted websites. The issue exists in the `kirim()` function within the `application/modules/web/controllers/buku tamu.php` file, triggered by the manipulation of the `nama`, `email`, and `pesan` arguments. **Recommendations** As a temporary workaround, restrict access to the `kirim()` function in the `application/modules/web/controllers/buku tamu.php` file until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jaychouchannel Tourism-Management-System versions up to 229956e20dbd4a80eeff14535e44d3099502af09 **Description** Improper privilege management exists in the User Register Endpoint within the file travel/src/main/java/com/controller/UsersController.java. A remote attacker can manipulate the `UsersEntity` argument to gain unauthorized privileges. **Recommendations** Apply patch 84d8ec384f669df3985293dab293bb7b477efa64 to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** jaychouchannel Tourism-Management-System versions prior to 84d8ec384f669df3985293dab293bb7b477efa64 **Description** A security flaw exists in the Update Endpoint component where a manipulation of an unknown function allows for missing authentication. This issue enables a remote attacker to bypass authentication requirements. **Recommendations** Install patch 84d8ec384f669df3985293dab293bb7b477efa64. Restrict access to the Update Endpoint component to minimize the risk of exploitation.