Msd0Pe

**Name of the Vulnerable Software and Affected Versions** Arcsoft PhotoStudio version 6.0.0.172 **Description** Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability within the ArcSoft Exchange Service. This allows local attackers to potentially escalate privileges. Specifically, attackers can place a malicious executable within an unquoted path, and the service may execute this code with system-level permissions. **Recommendations** Apply appropriate quoting to the service path to prevent the execution of unauthorized executables.

**Name of the Vulnerable Software and Affected Versions** OCS Inventory NG version 2.3.0.0 **Description** The software contains an unquoted service path vulnerability. This allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger a service restart to execute code with elevated system privileges. **Recommendations** Ensure the service path is properly quoted to prevent the execution of unauthorized code.

**Name of the Vulnerable Software and Affected Versions** Chitor-CMS versions prior to 1.1.2 **Description** The issue is related to multiple SQL injection vulnerabilities. **Recommendations** For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue.