Barış Baydur

**Name of the Vulnerable Software and Affected Versions** Datactive versions 2.13.34 through 2.14.0.5 **Description** The software contains a flaw related to improper handling of user-supplied data during web page creation, specifically a Stored Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages viewed by other users. The issue involves insufficient neutralization of script-related HTML tags. **Recommendations** Update Datactive to version 2.14.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** Eksagate Webpack Management System versions through 20251119 **Description** A flaw exists in Eksagate Webpack Management System that allows for SQL Injection. This issue enables unauthorized database control without authentication. The vulnerability is due to improper neutralization of special elements within SQL commands. **Recommendations** Versions prior to 20251119 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ArkSigner Software and Hardware Inc. AcBakImzala versions prior to 5.1.4 **Description** The AcBakImzala software contains a flaw related to improper input neutralization during web page generation, specifically a Reflected Cross-Site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. **Recommendations** Update AcBakImzala to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** ArkSigner AcBakImzala versions prior to 5.1.4 **Description** The software contains a PHP Local File Inclusion issue due to improper control of filename inclusion mechanisms. This allows for the inclusion of files from untrusted sources. The issue affects the `AcBakImzala` software. **Recommendations** Update to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** giSoft Information Technologies City Guide versions prior to 1.4.45 **Description** The software contains a flaw related to improper input handling during web page generation, which could lead to Reflected Cross-site Scripting (XSS). This allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** Update to version 1.4.45 or later.