Kurdish Security

**Name of the Vulnerable Software and Affected Versions** Knusperleicht Shoutbox versions 4.4 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `sb include path` parameter in the index.php file. **Recommendations** For versions 4.4 and earlier, consider restricting access to the `sb include path` parameter in the index.php file until a patch is available. As a temporary workaround, avoid using the `sb include path` parameter with untrusted URLs.

**Name of the Vulnerable Software and Affected Versions** UHP (User Home Pages) component (aka com uhp) for Mambo or Joomla! version 0.5 **Description** The issue concerns remote file inclusion vulnerabilities in several PHP files within the UHP component, potentially allowing remote attackers to execute arbitrary PHP code. The vulnerability can be exploited via a URL in the `mosConfig absolute path` parameter. **Recommendations** For UHP (User Home Pages) component (aka com uhp) for Mambo or Joomla! version 0.5, consider restricting access to the vulnerable PHP files, such as uhp config.php, footer.php, functions.php, install.uhp.php, toolbar.uhp.html.php, uhp.class.php, and uninstall.uhp.php, to minimize the risk of exploitation. Avoid using the `mosConfig absolute path` parameter in URLs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MoSpray (aka com mospray) version 1.8 RC1 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `basedir` parameter in multiple PHP files, including admin.php, details.php, modify.php, newgroup.php, newtask.php, and rss.php. **Recommendations** For MoSpray (aka com mospray) version 1.8 RC1, consider restricting access to the `basedir` parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the `basedir` parameter in the affected files to minimize the risk of exploitation.