Ha1Yuyiqiyinhangzhoutechn0Logy

**Name of the Vulnerable Software and Affected Versions** fastcms (affected versions not specified) **Description** A problematic vulnerability has been found in fastcms, affecting an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal, and it is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zhong Bang CRMEB Java version 1.3.4 **Description** A critical issue has been found, affecting the /api/admin/system/store/order/list endpoint. The manipulation of the `keywords` argument leads to SQL injection. The exploit has been disclosed to the public and may be used. **Recommendations** For Zhong Bang CRMEB Java version 1.3.4, as a temporary workaround, consider restricting access to the /api/admin/system/store/order/list endpoint to minimize the risk of exploitation. Avoid using the `keywords` argument in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.