Farhadkey

Name of the Vulnerable Software and Affected Versions: PacPoll versions 4.0 and earlier Description: The issue allows remote attackers to bypass authentication by setting the `polllog` cookie value to "xx". This affects the Admin/adpoll.asp page. Recommendations: For PacPoll versions 4.0 and earlier, consider restricting access to the Admin/adpoll.asp page until a patch is available. As a temporary workaround, avoid using the `polllog` cookie or set its value to a secure default to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: PacPoll versions 4.0 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `uid` and `pwd` parameters in the "Admin/check.asp" endpoint. Recommendations: For PacPoll versions 4.0 and earlier, update to a version later than 4.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Digiappz Freekot version 1.01 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `login` or `password` parameters in the login verif.asp file. **Recommendations** For Digiappz Freekot version 1.01, consider restricting access to the login verif.asp file until a patch is available. As a temporary workaround, avoid using the `login` and `password` parameters in the login process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHP-Post versions 0.21 and 1.0, and possibly earlier versions **Description** The issue allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the `logincookie[user]` setting in the login cookie when auto-login is enabled. **Recommendations** For PHP-Post versions 0.21 and 1.0, and possibly earlier versions, consider disabling the auto-login feature to prevent exploitation until a fix is available. As a temporary workaround, restrict access to administrative privileges to minimize the risk of exploitation. Avoid using the auto-login feature until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Snitz Forum versions 3.4.05 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `GROUP` parameter in a cookie, specifically through the `%strCookieURL%.GROUP` parameter. **Recommendations** For Snitz Forum versions 3.4.05 and earlier, update to a version later than 3.4.05 to resolve the issue. As a temporary workaround, consider restricting access to the `inc header.asp` file until a patch is available. Avoid using the `GROUP` parameter in cookies for the affected versions until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** myNewsletter versions 1.1.2 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `UserName` parameter in either the "validatelogin.asp" or "adminlogin.asp" API endpoints. **Recommendations** For myNewsletter versions 1.1.2 and earlier, consider restricting access to the "validatelogin.asp" and "adminlogin.asp" endpoints until a patch is available. Avoid using the `UserName` parameter in these endpoints to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Nukedit versions 4.9.6 and earlier **Description** The issue allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified `groupid` parameter when creating a user via the "addDB action" in the "utilities/register.asp" file. **Recommendations** For Nukedit versions 4.9.6 and earlier, restrict access to the "utilities/register.asp" file to prevent unauthorized user creation, and avoid using the `groupid` parameter in the addDB action until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** NewsCMSLite (affected versions not specified) **Description** The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the `loggedIn` cookie to "xY1zZoPQ". **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zixforum version 1.12 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `layid` parameter to API endpoints such as "login.asp" and "main.asp". **Recommendations** For Zixforum version 1.12, avoid using the `layid` parameter in the affected API endpoints until the issue is resolved. Restrict access to the vulnerable settings.asp file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** D2KBlog versions 1.0.3 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `msg` parameter in the Default.asp file. **Recommendations** For D2KBlog versions 1.0.3 and earlier, as a temporary workaround, consider restricting access to the Default.asp file until a patch is available. Avoid using the `msg` parameter in the affected page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** aeNovo (affected versions not specified) aeNovoShop (affected versions not specified) aeNovoWYSI (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL code, potentially enabling cross-site scripting (XSS) attacks in resulting error messages. This can be achieved via the `password` parameter in "control.asp" and the `strSQL` parameter in "search.asp". **Recommendations** For aeNovo, consider restricting access to the `control.asp` and `search.asp` pages until a fix is available. For aeNovoShop, avoid using the `password` parameter in "control.asp" and the `strSQL` parameter in "search.asp" until the issue is resolved. For aeNovoWYSI, as a temporary workaround, consider disabling the execution of SQL code from user-input parameters in "control.asp" and "search.asp" until a patch is available.

**Name of the Vulnerable Software and Affected Versions** aeNovo products (affected versions not specified) **Description** The issue concerns the storage of password information in plaintext within certain tables of aeNovo products, including aeNovo, aeNovoShop, and aeNovoWYSI. Specifically, the control, content, and page tables contain plaintext passwords. This allows attackers who have access to the database to obtain these passwords and potentially gain privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.