Tta0

**Name of the Vulnerable Software and Affected Versions** Intern Membership Management System version 1.0 **Description** A SQL injection issue exists in the Intern Membership Management System. The issue is located in the `/admin/delete activity.php` file, within an unknown function. Manipulating the `activity id` argument can lead to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed. **Recommendations** Apply a fix to address the manipulation of the `activity id` argument in the `/admin/delete activity.php` file.

**Name of the Vulnerable Software and Affected Versions** RainyGao DocSys versions through 2.02.36 **Description** A flaw exists in RainyGao DocSys that allows for remote manipulation leading to SQL injection. The issue is related to the `getUserList` function within the `/Manage/getUserList.do` file. The exploit has been publicly disclosed. **Recommendations** Update RainyGao DocSys to a version beyond 2.02.36.

**Name of the Vulnerable Software and Affected Versions** RainyGao DocSys versions up to 2.02.36 **Description** A flaw exists in the File Upload component of RainyGao DocSys. The `updateRealDoc` function within the `/Doc/uploadDoc.do` file is susceptible to path traversal due to manipulation of the `path` argument. This issue can be exploited remotely. The exploit is publicly available. **Recommendations** Versions prior to 2.02.36 should be updated.

**Name of the Vulnerable Software and Affected Versions** RainyGao DocSys versions up to 2.02.36 **Description** A flaw exists in RainyGao DocSys that allows for path traversal. This issue is related to the file `/Doc/deleteDoc.do` and involves manipulating the `path` argument. The attack can be initiated remotely. The exploit has been publicly disclosed, and the vendor was informed but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** kaifangqian kaifangqian-base (affected versions not specified) **Description** A security flaw exists in kaifangqian kaifangqian-base. The issue involves information disclosure resulting from manipulation of the `getAllUsers` function located in the file kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java. The attack can be launched remotely and the exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.