Csirt-It

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An unauthenticated OS command injection flaw exists in the 'ping.php' endpoint. This allows remote attackers to execute arbitrary commands on the underlying operating system, leading to remote code execution. OS command injection is a flaw where an application passes unsafe user-supplied data to a system shell. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WordPress Design Scuole Italia theme (affected versions not specified) **Description** A path traversal issue exists in the `reserved file check()` function within the `functions.php` file. This flaw allows an unauthenticated attacker to download arbitrary files that are accessible by the web server process. Path traversal is a technique used to access files and directories that are stored outside the web root folder. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `reserved file check()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Design Scuole Italia (affected versions not specified) **Description** Authorization bypass issues exist within the `dsi pdf generator()` and `dsi csv generator()` functions. These flaws allow an unauthenticated attacker to access restricted "Circolare" content and sensitive data belonging to registered users. The exploitation process is further facilitated by an unauthenticated RSS feed located at the '/circolare/feed/' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Design Scuole Italia (affected versions not specified) **Description** A Reflected Cross-Site Scripting (XSS) issue exists in the `filters-scheda-didattica.php` file. This allows an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser by using a crafted URL that includes a malicious `archive` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Design Scuole Italia (affected versions not specified) **Description** The Firma Circolare feature allows an authenticated attacker to perform stored HTML injection. By manipulating the `sign` parameter, an attacker can inject arbitrary HTML to force visiting users to be redirected to an external URL controlled by the attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.