Dest1Ny_1

**Name of the Vulnerable Software and Affected Versions** RafyMrX TOKO-ONLINE-ROTI versions up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99 **Description** A remote SQL injection flaw exists in the `proses/add.php` file. This issue occurs when the `kode produk` or `kd cs` arguments are manipulated, allowing an attacker to execute arbitrary SQL commands on the database. **Recommendations** As a temporary workaround, restrict access to the `proses/add.php` file or avoid using the `kode produk` and `kd cs` parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RafyMrX TOKO-ONLINE-ROTI versions up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99 **Description** An issue exists that allows for missing authentication, which can be exploited remotely. The software utilizes a rolling release strategy for continuous delivery, meaning specific version details for updates are not available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** igweze wizgrade versions up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6 **Description** A remote cross site scripting issue exists in the `dashboard/studentConductManager.php` file. Cross site scripting is a technique where malicious scripts are injected into trusted websites, which are then executed in the browser of the user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.