Nonroot

**Name of the Vulnerable Software and Affected Versions** DeStar versions 0.2.2 through 0.2.5 **Description** A static code injection issue exists, allowing remote authenticated users to inject arbitrary Python code into destar cfg.py and add arbitrary administrators via a crafted `pin` parameter in the user/settings/ endpoint. **Recommendations** For DeStar versions 0.2.2 through 0.2.5, as a temporary workaround, consider restricting access to the user/settings/ endpoint until a patch is available. Avoid using the `pin` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DeStar versions 0.2.2-5 **Description** The issue allows remote attackers to add arbitrary users via a direct request to "config/add/CfgOptUser". **Recommendations** For DeStar versions 0.2.2-5, consider restricting access to the "config/add/CfgOptUser" endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MoinMoin versions 1.5.8 and earlier **Description** The issue allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the `MOIN ID` user ID in a cookie for a userform action. This can be leveraged for PHP code execution via the `quicklinks` parameter. **Recommendations** For MoinMoin versions 1.5.8 and earlier, update to a version that includes the fix committed in revision e69a16b6e630 to resolve the issue. As a temporary workaround, consider restricting access to the `quicklinks` parameter and the `MOIN ID` user ID in the cookie for the userform action to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** X7 Chat versions 2.0.5 and earlier **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `day` parameter in a "sm window" action in the index.php file. **Recommendations** For versions 2.0.5 and earlier, update to a version that contains a fix for this issue, if available. As a temporary workaround, consider restricting access to the `day` parameter in the "sm window" action to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cacti version 0.8.5a **Description** The issue allows remote attackers to gain sensitive information via an HTTP request to certain PHP files, including "auth.php", "auth login.php", and "auth changepassword.php". These files can reveal the installation path in a PHP error message. **Recommendations** For Cacti version 0.8.5a, consider restricting access to the affected PHP files, such as "auth.php", "auth login.php", and "auth changepassword.php", to minimize the risk of exploitation. Additionally, ensure that PHP error messages are properly configured to prevent the disclosure of sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cacti version 0.8.5a **Description** The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This can be achieved via the `username` or `password` parameters. **Recommendations** For Cacti version 0.8.5a, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, restrict access to the auth login.php module to minimize the risk of exploitation. Avoid using the `username` and `password` parameters in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Jaws Framework and Content Management System version 0.4 **Description** The issue allows remote attackers to execute arbitrary SQL and bypass authentication. This can be achieved via the `user`, `password`, or `crypted password` parameters. **Recommendations** For Jaws Framework and Content Management System version 0.4, consider restricting access to the controlpanel.php file until a patch is available. As a temporary workaround, avoid using the `user`, `password`, or `crypted password` parameters in the affected API endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LinPHA version 0.9.4 **Description** The issue allows remote attackers to execute arbitrary SQL code and bypass authentication. This is achieved via the `linpha userid` or `linpha password` cookies. **Recommendations** For LinPHA version 0.9.4, update to a version that fixes the SQL injection issue to prevent remote attackers from executing arbitrary SQL code and bypassing authentication.