Lvzc1

A critical vulnerability has been found in the product list.php file of Fanli2012 native-php-cms. The issue is related to the manipulation of the `cat` argument, which leads to SQL injection. This can be exploited remotely. The exploit has been publicly disclosed.

A critical issue has been found in the software, affecting an unknown function of the file /fladmin/cat dodel.php. The manipulation of the `id` argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the processing of the file /fladmin/article dodel.php. The manipulation of the `id` argument leads to SQL injection. The attack may be initiated remotely. The issue has been publicly disclosed and may be used.

A critical vulnerability was found in the file /fladmin/friendlink dodel.php, where the manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the `uploadPicture` function of the `AdminBookController` class, located in the file `src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController.java`. The manipulation of the `pictureFile` argument leads to unrestricted upload. This issue can be exploited remotely. The exploit has been publicly disclosed and may be used.

A critical vulnerability has been found in ZeroWdd myblog, affecting an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. This issue leads to permission problems and can be exploited remotely. The exploit has been publicly disclosed.

A critical issue affects the `getHtml` function of the file `src/main/java/org/zdd/bookstore/rawl/HttpUtil.java`. The manipulation of the `url` argument leads to server-side request forgery, allowing remote attack initiation. The exploit has been publicly disclosed and may be used.

A problem has been detected in the update function of the file src/main/java/com/wdd/myblog/controller/admin/BlogController.java. This issue leads to cross site scripting attacks, which can be launched remotely. The exploit for this issue has been made public.

A critical issue has been found in the upload function of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the `file` argument leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the `findBlogList` and `getTotalBlogs` arguments leads to xml injection. The attack can be initiated remotely.

A critical vulnerability was found in the upload function of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController.java. The manipulation of the `file` argument leads to unrestricted upload. The attack can be launched remotely.

A critical vulnerability has been found in the software. It affects the `uploadFileByEditomd` function in the file `src/main/java/com/site/blog/my/core/controller/admin/BlogController.java`. The manipulation of the argument `editormd-image-file` leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in the submitAddPermission function of the PermissionController.java file. The manipulation of the `url` argument leads to cross-site scripting. The attack may be initiated remotely. Other parameters might be affected as well.

A critical issue was found in the file /pda/reportshop/next detail.php, where the manipulation of the `repid` argument leads to sql injection. It is possible to launch the attack remotely. The issue has been disclosed to the public and may be used.

A critical issue has been found in Tongda OA, affecting some unknown processing of the file /pda/reportshop/record detail.php. The manipulation of the `repid` argument leads to SQL injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in Tongda OA, affecting the file /pda/workflow/check seal.php. The manipulation of the `ID` argument leads to SQL injection. The attack can be initiated remotely.

A critical issue has been found in Tongda OA, affecting the file /pda/workflow/webSignSubmit.php. The manipulation of the `saleId` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A critical issue affects some unknown functionality of the file /general/approve center/query/list/input form/delete data attach.php. The manipulation of the `RUN ID` argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A critical issue affects some unknown functionality of the file /general/approve center/list/input form/data picker link.php. The manipulation of the `dataSrc` argument leads to sql injection. The attack may be launched remotely.

A critical issue has been found in Tongda OA, affecting an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the `where repeat` argument leads to SQL injection. The attack can be launched remotely.