Yueyue

A security flaw exists in itsourcecode School Management System 1.0. The issue involves SQL injection stemming from the manipulation of the `ID` argument within an unknown function of the file '/ramonsys/user/controller.php'. This attack can be launched remotely. The exploit has been publicly released.

A weakness exists in Campcodes Retro Basketball Shoes Online Store 1.0 that allows for unrestricted file upload. The issue is located in an unknown function within the `/admin/admin running.php` file. Manipulation of the `product image` argument enables remote execution of the attack. The exploit has been publicly released.