Jaylan545

Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.2.9 Description: The issue is related to a XSS vulnerability. It affects the "admin.php?p=/Content/index/mcode/2#tab=t2" endpoint. Recommendations: For PbootCMS version 3.2.9, update to a version that fixes this issue, as the current version contains a XSS vulnerability in the specified endpoint.

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP version 1.0 Description: The issue concerns SQL injection in the `set password` function located in `application/controllers/home.php`. This allows for potential manipulation of database queries. Recommendations: For jerryhanjj ERP version 1.0, as a temporary workaround, consider disabling the `set password` function until a patch is available. Restrict access to the `application/controllers/home.php` file to minimize the risk of exploitation. Avoid using the `set password` function in the affected controller until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: horvey Library-Manager version 1.0 Description: The issue concerns SQL Injection in the Admin/Controller/BookController.class.php file. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. Recommendations: For horvey Library-Manager version 1.0, consider restricting access to the vulnerable `BookController.class.php` file until a patch is available. As a temporary workaround, avoid using any functionality that may trigger the SQL Injection in the `BookController.class.php` file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: verydows version 2.0 Description: The issue is related to insecure permissions, allowing a remote attacker to execute arbitrary code by uploading a specific file type. This can be achieved through the action of loading a particular type of file, which is not further specified. Recommendations: For verydows version 2.0, consider restricting access to file uploads until a fix is available, or apply specific configuration changes to mitigate the risk of arbitrary code execution.