Mofeifei

**Name of the Vulnerable Software and Affected Versions** SiteServer SSCMS version 7.4.0 **Description** An issue exists within the Agent Installation Workflow component where manipulating the `SecurityKey` argument leads to improper access controls. This allows for remote exploitation, although the attack is characterized by high complexity and is considered difficult to execute. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QueryMine sms (affected versions not specified) **Description** An unrestricted file upload flaw exists in the Background Management Page component. The issue occurs during the processing of the file 'admin/addteacher.php' when the `image` argument is manipulated, allowing a remote attacker to upload files without restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.