匿名

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `FileManager.editFile()` function in the `modules/filemanager/FileManagerController.java` component. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `FileManager.editFile()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information or cause a denial of service. This is achieved via the `FileManager.delete()` function in the component `modules/filemanager/FileManagerController.java`. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `FileManager.delete()` function until a patch is available. Restrict access to the `modules/filemanager/FileManagerController.java` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `TemplatePath` parameter in the component "jfinal cms/admin/folder/list". Recommendations: For Jfinal CMS versions 4.7.1 and earlier, consider restricting access to the "jfinal cms/admin/folder/list" component until a patch is available. As a temporary workaround, avoid using the `TemplatePath` parameter in this component to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the `getFolder()` function in the component `/modules/filemanager/FileManager.java`. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider disabling the `getFolder()` function until a patch is available. Restrict access to the `/modules/filemanager/FileManager.java` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to execute arbitrary code via the `Nickname` parameter in the component "/jfinal cms/front/person/profile.html". This is a Cross Site Scripting (XSS) issue. Recommendations: For Jfinal CMS versions 4.7.1 and earlier, as a temporary workaround, consider restricting access to the "/jfinal cms/front/person/profile.html" component until a patch is available. Avoid using the `Nickname` parameter in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Rockoa version 1.8.7 Description: The issue allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php. This can be exploited by sending crafted requests to the vulnerable endpoint, potentially allowing attackers to elevate their privileges. Recommendations: For Rockoa version 1.8.7, consider restricting access to the wordAction.php file until a patch is available. As a temporary workaround, avoid using the vulnerable parameters in the wordAction.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider files with alternative data streams, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadVideo" URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/ueditor/uploadVideo" URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** A command execution issue exists in OFCMS. This issue can be exploited via a template file using the `freemarker.template.utility.Execute` function, allowing an attacker to execute arbitrary commands. The exploitation involves using the `${ ex("}` syntax followed by the command. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to template files or disabling the use of the `freemarker.template.utility.Execute` function until a patch is applied. Avoid using the `ex` variable in template files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the "admin/ueditor/uploadScrawl" URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/ueditor/uploadScrawl" URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file extensions, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadFile" URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/ueditor/uploadFile URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue in OFCMS allows SQL injection, related to the SystemGenerateController.java file. This is specifically exploitable through the "admin/system/generate/create" API endpoint with the `sql` parameter. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/system/generate/create" API endpoint to minimize the risk of exploitation. Avoid using the `sql` parameter in this endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file extensions, such as file.jsp::$DATA, when accessing the "admin/ueditor/uploadImage" URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/ueditor/uploadImage URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the "admin/comn/service/editUploadImage" URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/comn/service/editUploadImage URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue was discovered related to directory traversal. This issue is connected to the `getTemplates` function in `TemplateController.java` and can be exploited through the "/admin/cms/template/getTemplates.html" API endpoint with specific parameters such as `res path` and `up dir`. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the `getTemplates` function in `TemplateController.java` to minimize the risk of exploitation. Avoid using the `res path` and `up dir` parameters in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the `dir` parameter. This enables writing arbitrary content, specified in the `file content` parameter, into an arbitrary file, defined by the `file name` parameter. The issue is related to the `save` function in `TemplateController.java`. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/cms/template/getTemplates.html" endpoint to minimize the risk of exploitation. Avoid using the `dir`, `file content`, and `file name` parameters in this endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** OFCMS versions prior to 1.1.3 **Description** An issue allows remote attackers to execute arbitrary code. The blocking of .jsp and .jspx files does not consider certain file names, such as file.jsp::$DATA, which can be exploited through the admin/comn/service/upload URI. **Recommendations** For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/comn/service/upload URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHPSHE version 1.6 **Description** The issue is related to a SQL injection in the `userbank` parameter. **Recommendations** For PHPSHE version 1.6, avoid using the `userbank` parameter until the issue is resolved. Consider restricting access to this parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHPOK version 4.8.338 **Description** The issue allows for an arbitrary file upload, which can be exploited by an attacker. **Recommendations** For PHPOK version 4.8.338, update to a version that contains a fix for this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.