Matan Sandori

An authorized attacker can disclose sensitive information over a network due to the use of an uninitialized resource. This issue allows attackers to obtain sensitive data and impact the system.

Name of the Vulnerable Software and Affected Versions HerikLyma CPPWebFramework versions up to 3.1 Description A path traversal issue exists in HerikLyma CPPWebFramework up to version 3.1 due to manipulation of some unknown processing. Remote exploitation is possible. The exploit is publicly available. Recommendations Update to a newer version of HerikLyma CPPWebFramework that addresses this path traversal issue.

A flaw exists in the `extend` function within the `lib/WebAudioRecorder.js` library, specifically in the Dynamic Config Handling component. This allows for improper modification of object prototype attributes. The issue is remotely exploitable, but requires a high level of complexity to successfully execute. The exploit is publicly available. The vendor was notified but did not respond.

A Boolean-based blind SQL injection vulnerability exists in the `/api/v1/contenttype` endpoint. The endpoint utilizes the `sites` query parameter, which accepts a comma-separated list of site identifiers or keys. The `sites` parameter is directly concatenated into a SQL query without proper sanitization, allowing an authenticated attacker with low privileges to extract data from the database, perform privilege escalation, or trigger denial-of-service conditions. Exploitation was verified using tools such as SQLMap, enabling full database exfiltration and potential denial-of-service conditions via crafted payloads.