Y4Y17

**Name of the Vulnerable Software and Affected Versions** JeecgBoot version 3.9.2 **Description** Remote command execution is possible in the CodeNode component of the AI Flow module, which supports Groovy script execution. The `SecurityCheck` class uses a blacklist to intercept dangerous calls; however, this mechanism can be bypassed using string concatenation and reflection due to the dynamic nature of Groovy. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Beauty Parlour Management System version 1.1 **Description** An issue exists where a crafted SQL statement can be used to access sensitive database information. This occurs via the `aptnumber` parameter in the '/appointment-detail.php' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CMSEasy versions prior to 7.7.8.0 **Description** CMSEasy versions prior to 7.7.8.0 are susceptible to arbitrary file deletion through the `database admin.php` file. **Recommendations** Update to a version newer than 7.7.8.0.

Name of the Vulnerable Software and Affected Versions: MCCMS version 2.7.0 Description: MCCMS version 2.7.0 is susceptible to arbitrary file deletion via the `Backups.php` component. This allows an attacker to execute arbitrary commands. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the `ID` parameter at the SEMCMS InquiryView.php file. Recommendations: Address the SQL injection issue by sanitizing or validating the `ID` parameter within the SEMCMS InquiryView.php file.

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: An arbitrary file upload vulnerability exists in the `/controller/PicManager.php` component. This allows attackers to execute arbitrary code by uploading a crafted template file. Recommendations: Update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting file upload permissions to the `/controller/PicManager.php` component.

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the `pid` parameter at the SEMCMS Categories.php file. Recommendations: As a temporary workaround, consider restricting access to the SEMCMS Categories.php file until a patch is available. Sanitize the `pid` parameter before using it in any SQL queries.

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability. The vulnerability is located in the `pid` parameter at the SEMCMS Quanxian.php file. Recommendations: As a mitigation, restrict access to the SEMCMS Quanxian.php file. Avoid using the `pid` parameter in the SEMCMS Quanxian.php file until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions prior to 2.5.10 Description: The issue is related to a file upload vulnerability in the store.php component, which fails to properly validate the contents of remotely downloaded ZIP plugin files. This insufficient validation allows attackers to execute arbitrary code on the vulnerable system. Recommendations: For versions prior to 2.5.10, update to version 2.5.10 to resolve the issue. As a temporary workaround, consider disabling the store.php component until the patch is applied. Restrict access to the ZIP plugin files to minimize the risk of exploitation. Avoid using the store.php component for remote downloads until the issue is resolved.