Youran

An issue exists in xiweicheng TMS that allows for unrestricted file uploads. This is due to the manipulation of the `filename` argument within the `Upload` function located in the file src/main/java/com/lhjz/portal/controller/FileController.java. The attack can be initiated remotely. The exploit is publicly available.

A flaw exists in xiweicheng TMS that allows for server-side request forgery. The issue is related to the `Summary` function within the `src/main/java/com/lhjz/portal/util/HtmlUtil.java` file. Manipulation of the `url` argument can trigger the flaw, potentially allowing for remote attacks. The exploit for this issue has been published.

A flaw exists in bestfeng oa git free up to version 9.5. The issue is related to the manipulation of the `writeProp` argument within the `updateWriteBack` function located in the file yimioa-oa9.5serverc-flowsrcmainjavacomcloudweboacontrollerWorkflowPredefineController.java. This manipulation can lead to XML External Entity (XXE) reference. The attack can be carried out remotely, and an exploit has been publicly released.

A cross site scripting issue exists in pojoin h3blog 1.0. The issue is related to the manipulation of the `Title` argument within an unknown function of the file '/admin/cms/category/addtitle'. This can be exploited remotely. The exploit is publicly available.