Matheuzsec

**Name of the Vulnerable Software and Affected Versions** Qualitor versions prior to 8.20.105 and prior to 8.24.98 **Description** A security flaw exists in Qualitor that allows for code injection. The `eval` function within the file `/html/st/stdeslocamento/request/getResumo.php` is affected. Manipulation of the `passageiros` argument can lead to code injection, and remote exploitation is possible. The exploit for this issue has been publicly released. **Recommendations** Qualitor versions prior to 8.20.105 should be upgraded. Qualitor versions prior to 8.24.98 should be upgraded.

**Name of the Vulnerable Software and Affected Versions** Qualitor version 8.20 **Description** A critical issue affects some unknown functionality of the file /html/ad/adconexaooffice365/request/testaConexaoOffice365.php. The manipulation of the `nmconexao` argument leads to command injection. This issue can be exploited remotely. **Recommendations** For Qualitor version 8.20, as a temporary workaround, consider restricting access to the /html/ad/adconexaooffice365/request/testaConexaoOffice365.php file until a patch is available. Avoid using the `nmconexao` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Employee Management System version 1.0 **Description** A critical issue has been found, affecting an unknown function of the file edit profile.php. The manipulation of the `txtfullname` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For SourceCodester Employee Management System version 1.0, consider restricting access to the edit profile.php file until a fix is available. As a temporary workaround, avoid using the `txtfullname` argument in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Employee Management System version 1.0 **Description** A critical issue was found in the Profile Page component, specifically in the file edit-photo.php, allowing for unrestricted upload. This can be exploited remotely. **Recommendations** For SourceCodester Employee Management System version 1.0, restrict access to the edit-photo.php file to prevent unrestricted upload until a fix is available.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Employee Management System version 1.0 **Description** A critical issue affects some unknown functionality of the file /Admin/login.php. The manipulation of the `txtusername` argument leads to sql injection. The attack can be launched remotely. **Recommendations** For SourceCodester Employee Management System version 1.0, consider restricting access to the /Admin/login.php file until a patch is available. As a temporary workaround, avoid using the `txtusername` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.