Jia-Rong Chen

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly, allowing remote attackers to access the system directory through Path Traversal with users' privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The issue concerns the use of a weak factory default administrator password in the Orca HCM digital learning platform. This password is hard-coded in the source code of the webpage in plain text. As a result, remote attackers can obtain administrator privileges without logging in. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The management page of the Orca HCM digital learning platform does not perform identity verification, allowing remote attackers to execute management functions without logging in. This enables attackers to access members' information, modify and delete courses in the system, causing users to fail to access the learning content. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The issue concerns the upload function of the Orca HCM digital learning platform, where a specific parameter does not filter file formats. This allows remote unauthenticated attackers to upload files containing malicious scripts, enabling them to execute remote code execution (RCE) attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The issue concerns the directory page parameter of the Orca HCM digital learning platform, which fails to filter special characters. This allows remote attackers to access the system directory through Path Traversal without logging in. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform (affected versions not specified) Description: The issue concerns a specific function of the Orca HCM digital learning platform that fails to filter input parameters properly, allowing the URL to be redirected to any website. This can be exploited by remote attackers to execute phishing attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system (affected versions not specified) Description: The issue is related to incorrect implementation of authentication and session management in the CTS Web transaction system. This allows remote unauthenticated attackers to send a large number of valid usernames, forcing logged-in accounts to log out and preventing users from accessing services. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system (affected versions not specified) Description: The issue is related to incorrect implementation of authentication management in the CTS Web transaction system. After a user logs in, remote attackers can manipulate cookies to access other accounts and trade in the stock market with a spoofed identity. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: CTS Web trading system (affected versions not specified) Description: The issue concerns the CTS Web trading system, where specific function parameters do not filter special characters. This allows unauthenticated attackers to remotely perform reflected XSS attacks, enabling them to obtain the users' connection token that triggered the attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mitake smart stock selection system (affected versions not specified) Description: The issue allows remote attackers to gain privileged permissions by manipulating parameters in the URL, enabling access to transaction records and fraudulent trading without login. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CGE (affected versions not specified) **Description** Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CGE property management system (affected versions not specified) **Description** The issue concerns SQL Injection vulnerabilities in the CGE property management system. Remote attackers can inject SQL commands into the parameters in the Cookie and obtain data in the database without privilege. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CGE (affected versions not specified) **Description** The CGE page with a download function contains a Directory Traversal issue. This allows attackers to download system files arbitrarily. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HGiga EIP product (affected versions not specified) **Description** The issue is related to ineffective access control in certain pages of the HGiga EIP product, allowing attackers to access the database or perform privileged functions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HGiga EIP product (affected versions not specified) **Description** The issue allows attackers to inject SQL commands into a specific URL parameter, namely the online registration parameter, to obtain the database schema and data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HGiga EIP product (affected versions not specified) **Description** The issue allows attackers to inject SQL commands into a specific URL parameter on the document management page to obtain database schema and data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The School Manage System versions prior to 2020 **Description** The issue allows attackers to inject SQL commands into the URL, potentially enabling them to access database schema and username/password information. This is achieved through a union-based injection query string. **Recommendations** For versions prior to 2020, consider restricting access to sensitive database information and limiting the ability to inject SQL commands into URLs as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** The School Manage System versions prior to 2020 **Description** The issue is related to an unrestricted file upload vulnerability, which allows attackers to gain access to the hosting machine. This is due to a misconfigured file upload filter that permits the upload of any file format to the system. **Recommendations** For versions prior to 2020, consider disabling the file upload feature until a proper fix is applied to prevent unrestricted file uploads. Restrict access to the file upload module to minimize the risk of exploitation. Avoid using the file upload functionality in the affected system until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** The School Manage System versions prior to 2020 **Description** The issue allows attackers to access arbitrary files due to a Path Traversal vulnerability. This enables unauthorized access to sensitive information. **Recommendations** For versions prior to 2020, update to a version released in 2020 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sunnet eHRD (affected versions not specified) **Description** The issue concerns the improper storage of system files in Sunnet eHRD, a human training and development management system. Attackers can exploit this by using a specific URL to capture confidential information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.