Starwung

**Name of the Vulnerable Software and Affected Versions** Jingmen Zeyou Large File Upload Control versions up to 6.3 **Description** A critical issue exists in Jingmen Zeyou Large File Upload Control. The manipulation of the `ID` parameter in the `/index.jsp` file leads to SQL injection. This allows for remote attacks. The exploit has been publicly disclosed. **Recommendations** Versions prior to 6.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.