Ali Kazar

**Name of the Vulnerable Software and Affected Versions** Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS versions 1.0.5.10 through 10022026 **Description** The software contains an Improper Neutralization of Special Elements used in an SQL Command issue, specifically a SQL Injection. This allows for potential exploitation of the system. The vendor was contacted regarding this issue but did not respond. **Recommendations** Update ZEUS PDKS versions from 1.0.5.10 to 10022026.

**Name of the Vulnerable Software and Affected Versions** Netoloji Software E-Flow versions prior to 3.23.00 **Description** The issue affects Netoloji Software E-Flow, allowing unrestricted upload of files with dangerous types and improper neutralization of input during web page generation, which can lead to Stored XSS and File Content Injection. This can enable accessing functionality not properly constrained by ACLs. **Recommendations** For versions prior to 3.23.00, update to version 3.23.00 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only allow safe file types and disabling any functionality that allows uploading files with dangerous types until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SambaBox versions prior to 5.1 **Description** The issue affects SambaBox, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. **Recommendations** For versions prior to 5.1, update to version 5.1 or later to resolve the issue.