Orionyan

A path traversal issue exists in the Delete Username Endpoint component within the `/system/htmly.php` file. The `unlink()` function fails to properly validate the `File` argument, allowing a remote attacker to manipulate the file path to delete arbitrary files on the system.

A path traversal flaw exists in the Admin Content Endpoint component. A remote attacker can manipulate the `oldfile` argument within the `add content()` function located in the `/system/admin/admin.php` file. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

A path traversal issue exists in the Author Name Handler component within the `/system/htmly.php` file. A remote attacker can exploit this by manipulating the `Name` argument, allowing them to access files and directories outside the intended folder.

A flaw in the Crawler/Puppeteer component allows remote attackers to perform server-side request forgery (SSRF), a technique where an attacker induces a server-side application to make requests to an unintended location. The issue resides in the `isValidTLD()` function within the `/backend/functions/src/cloud-functions/crawler.ts` file.

An issue exists in the `/edit exam1.php` file where a manipulation of the `ID` argument can lead to SQL injection, a technique used to interfere with the queries that an application makes to its database. This flaw allows a remote attacker to execute the attack over the network.

An issue exists in the `/edit course1.php` file where the manipulation of the `ID` argument allows for SQL injection. This allows a remote attacker to interfere with the database queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to data.

An issue exists in the `/edit room.php` file where manipulating the `ID` argument allows for SQL injection, a technique used to interfere with the queries that an application makes to its database. This attack can be initiated remotely.