Saul1213

A path traversal issue exists in SSCMS. The issue is located in an unknown function within the `LayerImageController.Submit.cs` file of the `layerImage` component. Manipulation of the `filePaths` argument in the `layerImage` endpoint can lead to path traversal. The exploit has been publicly disclosed.

A security flaw exists in SSCMS 7.4.0, specifically within the DDL Handler component, affecting unknown code in the SitesAddController.Submit.cs file. The issue involves SQL injection resulting from manipulation of the `tableHandWrite` argument. This allows for remote attacks. The exploit has been publicly released. The vendor was contacted but did not respond.

A flaw exists in SSCMS that allows for path traversal. This issue is related to the manipulation of the `path` argument within the `PathUtils.RemoveParentPath` function located in the file `/api/admin/plugins/install/actions/download`. Successful exploitation could allow for remote attacks. The exploit for this issue has been publicly disclosed. The vendor was informed of this disclosure but did not provide a response.

A flaw exists within JeecgBoot that allows for SQL injection. This issue is located in the `isExistSqlInjectKeyword` function within the `/jeecg-boot/sys/api/getDictItems` file. Successful exploitation could occur remotely. The details of the exploit have been publicly disclosed.

A flaw exists in thinkgem JeeSite, potentially allowing for xml external entity reference. This issue is related to a function within the file `/com/jeesite/common/shiro/cas/CasOutHandler.java` of the Endpoint component. The attack can be performed remotely and is considered highly complex, with difficult exploitability. The exploit has been published. The vendor was contacted but did not respond.

A path traversal issue exists in thinkgem JeeSite, specifically within the Connection Handler component. The issue allows for remote attacks with high complexity, though exploitability is considered difficult. The exploit details have been publicly disclosed. The vendor was informed of the issue but did not respond.

A weakness exists in Sanluan PublicCMS 6.202506.d, specifically within the `saveMetadata` function of the `TemplateCacheComponent.java` file in the Template Cache Generation component. A manipulation can lead to a path traversal. The attack can be executed remotely. An exploit has been publicly released. The vendor was contacted prior to disclosure but did not respond.

A server-side request forgery condition exists in JeecgBoot 3.9.0. This issue is related to the file `/sys/common/uploadImgByHttp`. Manipulation of the `fileUrl` argument can lead to server-side request forgery. The attack can be initiated remotely. The exploit has been publicly released. The vendor was notified but did not respond.

A path traversal issue exists in Dromara UJCMS version 101.2. This is due to manipulation of the `deleteDirectory` function within the `WebFileTemplateController.delete` file of the Template Handler component. The attack can be performed remotely. The exploit has been publicly disclosed.

A flaw exists in Dromara UJCMS version 10.0.2 within the ImportDataController component. Specifically, the `importChanel` function, located in the file `/api/backend/ext/import-data/import-channel`, is susceptible to injection due to manipulation of the `driverClassName` and `url` arguments. This issue can be exploited remotely. The details of the exploit have been publicly disclosed.

A path traversal weakness exists in JeecgBoot. This issue affects some unknown functionality of the file `/airag/knowledge/doc/edit` within the Retrieval-Augmented Generation Module. Manipulation of the `filePath` argument can lead to path traversal, and the attack can be executed remotely. The exploit has been publicly released. The vendor was contacted but did not respond.