Vampirensa

**Name of the Vulnerable Software and Affected Versions** itsourcecode Online Hotel Management System version 1.0 **Description** A remote SQL injection is possible via the manipulation of the `email` argument within an unknown function of the '/admin/login.php' endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `email` argument in the '/admin/login.php' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Tenda JD12L version 16.03.53.23 **Description** A stack-based buffer overflow occurs when manipulating the `security 5g` argument within the `formWifiBasicSet()` function of the `/goform/WifiBasicSet` file. This issue allows for remote attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/WifiBasicSet` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda JD12L version 16.03.53.23 **Description** A stack-based buffer overflow occurs in the `fromAddressNat()` function within the `/goform/addressNat` file. This issue is triggered by the manipulation of the `page` argument, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda JD12L version 16.03.53.23 **Description** A stack-based buffer overflow occurs in the `formSetPPTPServer()` function within the `/goform/SetPptpServerCfg` file. This issue is triggered by the manipulation of the `startIp` argument, allowing a remote attacker to execute the attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/SetPptpServerCfg` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda JD12L version 16.03.53.23 **Description** A stack-based buffer overflow occurs when manipulating the `shareSpeed` argument within the `fromSetWifiGusetBasic()` function located in the `/goform/WifiGuestSet` file. This issue allows for remote attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/WifiGuestSet` endpoint to minimize the risk of exploitation.