Zhihong Tian

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple Responsive Tourism Website version 1.0 **Description** A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for SQL injection. This issue is related to the manipulation of the `Username` argument within the `/classes/Master.php?f=register` file during the registration process. The attack can be initiated remotely. An exploit for this issue has been published. **Recommendations** Apply any available updates or patches to address the SQL injection issue in the `/classes/Master.php?f=register` file. As a temporary workaround, restrict or disable the registration functionality until a patch is available. Sanitize the `Username` input to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Baptism Information Management System version 1.0 **Description** A vulnerability exists in itsourcecode Baptism Information Management System version 1.0. The issue is due to SQL injection resulting from the manipulation of the `ID` argument in the `/rptbaptismal.php` file. The attack can be performed remotely. The exploit has been made public. **Recommendations** As a temporary workaround, consider restricting access to the `/rptbaptismal.php` file until a fix is available. Sanitize the `ID` argument before using it in SQL queries.

**Name of the Vulnerable Software and Affected Versions** Baptism Information Management System version 1.0 **Description** A SQL injection issue exists in the /listbaptism.php file due to manipulation of the `bapt id` argument. This allows for remote attacks. The exploit has been publicly disclosed. **Recommendations** As a temporary workaround, consider restricting access to the /listbaptism.php file until a fix is available. Sanitize the `bapt id` input to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** Ricoh printers and MFPs (affected versions not specified) **Description** A stack-based buffer overflow vulnerability exists in Ricoh laser printers and MFPs that implement Web Image Monitor. This issue is related to reading data beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code or cause a denial-of-service (DoS) condition by sending a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sourcecodester Faculty Evaluation System version 1.0 **Description** The issue concerns SQL Injection vulnerability. It can be exploited via the "/eval/admin/manage task.php?id=" API endpoint, specifically through the `id` variable. **Recommendations** For Sourcecodester Faculty Evaluation System version 1.0, as a temporary workaround, consider restricting access to the "/eval/admin/manage task.php?id=" API endpoint until a patch is available. Avoid using the `id` variable in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Projected File System FS Filter Driver (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can potentially lead to the disclosure of sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.