Nxq

**Name of the Vulnerable Software and Affected Versions** WoWonder Social Network Platform version 4.1.2 **Description** The issue is related to a SQL injection vulnerability. It can be exploited via the `offset` parameter at the "requests.php?f=load-my-blogs" endpoint. **Recommendations** For WoWonder Social Network Platform version 4.1.2, consider restricting access to the "requests.php?f=load-my-blogs" endpoint until a patch is available. As a temporary workaround, avoid using the `offset` parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WoWonder Social Network Platform version 4.1.4 **Description** The issue is related to a SQL injection vulnerability. It can be exploited via the `offset` parameter at the "requests.php?f=search&s=recipients" endpoint. **Recommendations** For WoWonder Social Network Platform version 4.1.4, consider restricting access to the `offset` parameter in the "requests.php?f=search&s=recipients" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IrfanView version 4.54 **Description** The issue allows a user-mode write access violation. This occurs at the FORMATS!ReadXPM W+0x0000000000000531 location. **Recommendations** For IrfanView version 4.54, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** IrfanView version 4.54 **Description** The issue allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file. This is related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call" starting at `FORMATS!ReadMosaic+0x0000000000000981`. **Recommendations** For IrfanView version 4.54, consider avoiding the use of crafted XBM files until a patch is available. As a temporary workaround, restrict the use of the `FORMATS!ReadMosaic` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.