Yunus Kara

**Name of the Vulnerable Software and Affected Versions** Products's Store versions prior to 030631b2 **Description** An SQL injection issue exists due to the improper neutralization of special elements used in an SQL command. This allows an attacker to execute arbitrary SQL commands on the system. **Recommendations** Update Products's Store to version 030631b2 or later.

**Name of the Vulnerable Software and Affected Versions** Software Repository Management versions prior to 2fb4acee **Description** An unrestricted file upload issue exists in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management. This flaw allows an attacker to upload a Web Shell—a malicious script that enables remote administration of the server—to a web server. **Recommendations** Update Software Repository Management to version 2fb4acee or later.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Twiser Informatics Technology Consulting, Trade and Education Inc. OKRs & Goals allows Stored XSS. This issue affects OKRs & Goals: from 28220 before 28398.