Toxich4

**Name of the Vulnerable Software and Affected Versions** LabCollector versions 6.0 through 6.15 **Description** The issue allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The problem is due to insufficient validation of the file being sent, such as files with names like `shell.jpg.php.shell`. This vulnerability is in the `message` function. **Recommendations** For versions 6.0 through 6.15, consider disabling the `message` function until a patch is available to prevent remote code execution. Restrict access to file uploads to minimize the risk of exploitation. Avoid using the file upload feature in the affected versions until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SmartPTT SCADA version 1.1.0.0 **Description** The issue allows remote code execution when an attacker has administrator privileges by writing a malicious C# script and executing it on the server. This can be done via server settings in the administrator control panel, which by default listens on port 8101. The vulnerability is related to errors in authorization in the Setting Handler component of the scada-server. **Recommendations** For SmartPTT SCADA version 1.1.0.0, consider disabling the administrator control panel or restricting access to it until a patch is available. As a temporary workaround, avoid using the server settings to execute scripts on the server. Restrict access to port 8101 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ScriptCase versions 9.9.008 and earlier **Description** The issue allows for Arbitrary File Deletion by an admin via a directory traversal sequence in the `file` parameter. This can be exploited through the db convert.php file. **Recommendations** For versions 9.9.008 and earlier, consider restricting access to the db convert.php file and the `file` parameter to minimize the risk of exploitation. As a temporary workaround, restrict the use of directory traversal sequences in the `file` parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.