I4M6Da

A file inclusion issue exists within the Installation Wizard component. The flaw is located in the ` 4 Setup()` function of the `install/index.php` file. This allows a remote attacker to include files through a high-complexity attack that is difficult to execute.

A security issue exists in open-webui. The JWT Key Handler component contains a weakness related to insufficiently random values generated due to manipulation of the `WEBUI SECRET KEY` argument within the file `backend/start windows.bat`. This allows for remote attacks, though exploitation is considered difficult and requires a high level of complexity. The exploit has been publicly disclosed.

A security issue exists in funadmin that allows for cross site scripting. The issue is located in the file `app/backend/view/index/index.html` within the Backend Interface component. Manipulation of the `Value` argument can trigger the issue, and it is possible to carry out the attack remotely. The exploit has been publicly disclosed.

A flaw exists in funadmin that allows for remote deserialization. This issue is located within the `getMember` function in the `app/common/service/AuthCloudService.php` file, part of the Backend Endpoint component. The `cloud account` argument is susceptible to manipulation, leading to the deserialization issue. The exploit for this issue is publicly available. The vendor was notified but did not respond.

A security flaw exists in funadmin that allows for weak password recovery. The issue is located in the `repass` function within the `app/frontend/controller/Member.php` file. Manipulation of the `forget code`/`vercode` argument can lead to exploitation. Remote exploitation is possible, but is considered difficult. The exploit has been publicly released.

A weakness exists in funadmin that could lead to improper authorization. This is due to a manipulation possible in the `setConfig` function within the `app/backend/controller/Ajax.php` file of the Configuration Handler component. The attack can be executed remotely. The exploit has been made publicly available. The vendor was contacted but did not respond.

A flaw exists in funadmin that could allow information disclosure. This issue is related to the `getMember` function within the `app/frontend/view/login/forget.html` file. The attack can be initiated remotely. The exploit is publicly available. The vendor was notified but did not respond.