Xcxr

A path traversal issue exists in the Tool Download Endpoint. Remote attackers can manipulate the `fileName` argument within the `download()` function of the `ToolController` class to access files outside the intended directory.

A cross-site scripting issue exists in the System Notice Handler component. A remote attacker can exploit this by manipulating the `noticeContent` argument within the `Add()` function of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java.

A SQL injection issue exists in the Users Endpoint. The flaw is located in the `getUserList()` function within the file `src/main/java/com/youlai/boot/system/controller/UserController.java`. Remote attackers can exploit this by manipulating the argument order to execute arbitrary SQL commands.

An unrestricted file upload issue exists within the Admin Upload component, specifically affecting the file `crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadServiceImpl.java`. Manipulation of the `model` argument allows for remote exploitation, enabling an attacker to upload files without proper restrictions.

Name of the Vulnerable Software and Affected Versions AutohomeCorp frostmourne versions up to 1.0 Description A security flaw exists in AutohomeCorp frostmourne up to version 1.0. The `httpTest` function within the Alarm Preview component, accessible via the file `/api/monitor-api/alarm/previewData`, is susceptible to SQL injection. This attack can be initiated remotely. The exploit for this issue has been publicly released. Recommendations Versions prior to 1.0 should be updated. As a temporary workaround, consider restricting access to the `/api/monitor-api/alarm/previewData` endpoint until a patch is available.

Name of the Vulnerable Software and Affected Versions AutohomeCorp frostmourne versions prior to 1.1 Description A server-side request forgery condition exists in AutohomeCorp frostmourne up to version 1.0. The issue is located within an unknown function in the file `frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java` of the Alarm Preview component. This can be exploited remotely. The exploit has been publicly disclosed. Recommendations Update to version 1.1 or later.

A security flaw exists in the Stream Proxy Query Handler component of 648540858 wvp-GB28181-pro. Specifically, the `selectAll` function within the file src/main/java/com/genersoft/iot/vmp/streamProxy/dao/provider/StreamProxyProvider.java is susceptible to SQL injection. This manipulation can be initiated remotely. The exploit for this issue has been publicly released.

A flaw exists in CodePhiliaX Chat2DB that allows for unrestricted file uploads. This issue is located within the `Upload` function of the `JdbcDriverController.java` file, specifically in the `chat2db-server/chat2db-server-web/chat2db-server-web-api/src/main/java/ai/chat2db/server/web/api/controller/driver/` component, related to the JDBC Driver Upload. The attack can be initiated remotely. The exploit has been publicly released.

A flaw exists in the EruptDataQuery function within the file erupt-ai/src/main/java/xyz/erupt/ai/call/impl/EruptDataQuery.java of the MCP Tool Interface component. This manipulation results in a SQL injection vulnerability via hibernate. The attack can be initiated remotely. The exploit has been published. The vendor was contacted regarding this disclosure but did not respond.

A flaw exists in the `geneEruptHqlOrderBy` function located in the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Manipulation of the `sort.field` argument can lead to a SQL injection vulnerability within Hibernate. This issue is remotely exploitable. The exploit has been publicly disclosed. The vendor was notified but did not respond.

A flaw in the `create()` function within the file src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java allows for remote cross-site scripting, a technique where malicious scripts are injected into trusted websites.

A security issue exists in atjiu pybbs 6.0.0. The `create` function within the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java is susceptible to cross site scripting. This allows for remote attacks. An exploit for this issue has been publicly released. The `create` function is vulnerable.

A server-side request forgery (SSRF) issue exists in the `downloadFile` function within the PPT File Handler component. The issue is caused by manipulation of the `url` argument. This allows for remote exploitation. The product utilizes a rolling release model, and no specific version details for affected or updated releases are available. The vendor was contacted regarding this disclosure but did not respond.

A path traversal issue exists in the `recognizeMarkdown` function within the file `yudao-module-digitalcourse/yudao-module-digitalcourse-biz/src/main/java/cn/iocoder/yudao/module/digitalcourse/util/Pdf2MdUtil.java`. Manipulation of the `fileUrl` argument can lead to unauthorized access. The attack can be launched remotely, and an exploit is publicly available. The software utilizes a rolling release model, meaning specific version details for fixes are not available. The vendor was notified of the issue but did not respond.

A security issue exists in glowxq glowxq-oj. A manipulation of the `uploadTestcaseZipUrl` function in the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java can lead to server-side request forgery. This attack can be initiated remotely. The exploit is publicly available. The product uses continuous delivery with rolling releases, and no specific version details for affected or updated releases are available. The vendor was contacted regarding this issue but did not respond.

A weakness exists in glowxq glowxq-oj. This issue affects the `Upload` function within the file business/business-system/src/main/java/com/glowxq/system/admin/controller/SysFileController.java, potentially leading to unrestricted upload. The attack can be launched remotely. The exploit has been made publicly available. The vendor was contacted regarding this disclosure but did not respond.

A server-side request forgery condition exists in itwanger paicoding. The issue is related to the manipulation of the `img` argument within the `Save` function located in the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the Image Save Endpoint component. This manipulation can lead to server-side request forgery, and the attack can be launched remotely. The exploit is publicly available. The vendor was contacted but did not respond.

A security flaw exists in youlaitech youlai-mall version 2.0.0 related to SQL injection. The issue affects the `listPagedSpuForApp` function within the file `mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java` of the App-side Product Pagination Endpoint component. Manipulation of the `sortField` and `sort` arguments can lead to SQL injection. Remote exploitation is possible, and an exploit has been publicly released. The vendor was notified but did not respond.

A cross-site scripting issue exists in rymcu forest. The issue is located in the `updateUserInfo` function within the `src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java` file of the User Profile Handler component. This allows for remote execution of attacks. The exploit is publicly available. The vendor was notified but did not respond.

A flaw exists in qinming99 dst-admin that can lead to a denial of service. This issue is related to the `deleteBackup` function within the `BackupController.java` file located in the `src/main/java/com/tugos/dst/admin/controller` directory, part of the File Handler component. The attack can be initiated remotely, and details about the exploit are publicly available. The vendor was notified but did not respond.