Yashkumar Keral

**Name of the Vulnerable Software and Affected Versions** Neethuharii CafeManagement (affected versions not specified) **Description** A security flaw allows remote attackers to perform unrestricted file uploads. This occurs due to improper processing of the `image` argument within the 'AddProductCode.php' file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Neethuharii CafeManagement (affected versions not specified) **Description** A SQL injection flaw exists in the Login Handler component within the `CafePortalLogin.php` file. A remote attacker can exploit this by manipulating the `uname` argument, allowing for unauthorized database queries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Neethuharii CafeManagement (affected versions not specified) **Description** A remote flaw exists in the `addcashier()` function within the AddCashierCode.php file. Manipulating the `uname`, `pass`, `role`, or `status` arguments can lead to improper authorization. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `addcashier()` function in the AddCashierCode.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Abdurrab5 online-makeup-store (affected versions not specified) **Description** An issue exists in the Admin Login Handler component within the `index.php` file. Remote attackers can perform SQL injection, a technique used to manipulate database queries, by manipulating the `id` and `password` arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Abdurrab5 online-makeup-store (affected versions not specified) **Description** An issue exists in the Customer Login Handler component within the `customerSignin.php` file. Remote manipulation of the `username` and `password` arguments allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Abdurrab5 online-makeup-store (affected versions not specified) **Description** An authorization bypass exists in the Admin Handler component within the `functions.php` file. A remote attacker can manipulate the `adminid` argument in the `confirm logged in()` and `confirm user()` functions to gain unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `confirm logged in()` and `confirm user()` functions in the `functions.php` file to minimize the risk of exploitation.