Bigbrother_Man

**Name of the Vulnerable Software and Affected Versions** Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System version 8.2.2 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists in the `/admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa` endpoint via the `Structure ID` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `Structure ID` parameter in the `/admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MetaCRM versions prior to 6.4.0 Beta06 **Description** A remote unrestricted file upload issue exists in the `/business/qnaire/upload.jsp` endpoint. By manipulating the `File` argument, an attacker can upload arbitrary files to the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/business/qnaire/upload.jsp` file to minimize the risk of exploitation.

A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=log fw nbc mail jsondata. Executing a manipulation of the argument subject can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability. A technical fix is planned to be released.

**Name of the Vulnerable Software and Affected Versions** MetaCRM versions prior to 6.4.0 Beta06 **Description** An issue exists in the PHPRPC Remote Call Interface component within the `/customizemt/xkq/rpc.jsp` file. A remote attacker can perform a SQL injection by manipulating the `phprpc args` argument passed to the `RPCService.query()` function. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `RPCService.query()` function or the `/customizemt/xkq/rpc.jsp` file.

**Name of the Vulnerable Software and Affected Versions** Hanwang e-Face General Management Platform version 6.3.5.4 **Description** A SQL injection issue exists in the `/sysAuthStr/querySysAuthStr.do` endpoint. This occurs when the manipulation of the argument order allows a remote attacker to execute arbitrary SQL commands. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/sysAuthStr/querySysAuthStr.do` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Ruijie RG-UAC versions prior to 1.0-R1.8.2.p5 **Description** A remote unrestricted upload issue exists within an unknown function of the `user auth commit.php` file. By manipulating the `upload image` argument, an attacker can upload files without restriction. **Recommendations** Update Ruijie RG-UAC to a version later than 1.0-R1.8.2.p5. As a temporary mitigation, restrict access to the `user auth commit.php` file or avoid using the `upload image` argument.

**Name of the Vulnerable Software and Affected Versions** Hanwang e-Face General Management Platform version 6.3.5.4 **Description** An issue exists in the processing of the '/manage/resourceUpload/upload.do' endpoint. By manipulating the `File` argument, a remote attacker can achieve unrestricted file upload. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/manage/resourceUpload/upload.do' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Zhilink ADP Application Developer Platform version 1.0.0 **Description** An XML External Entity (XXE) injection issue exists in the XML Parser component. This occurs when the application processes XML input containing references to external entities, which can be manipulated to cause the system to disclose internal files or interact with internal networks. The issue is located in the '/adpweb/a/base/barcodeDetail/import' endpoint and can be triggered remotely. **Recommendations** As a temporary workaround, restrict access to the '/adpweb/a/base/barcodeDetail/import' endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zhilink ADP Application Developer Platform version 1.0.0 **Description** A remote deserialization issue exists in the 'testConnection' endpoint. Manipulation of the `jdbcUrl` argument allows for this attack. Deserialization is a process where data is converted back into an object, which can be exploited to execute unauthorized code if the input is not properly validated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DNS-320 version 1.0.2 **Description** An issue exists in the processing of the '/web/web file/upload.php' endpoint. A remote attacker can perform a manipulation of the `File` argument to achieve unrestricted file upload. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Das Parking Management System version 6.2.0 **Description** A security flaw in the Search API endpoint allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs through the manipulation of the `Value` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Das Parking Management System version 6.2.0 **Description** Remote SQL injection is possible via the manipulation of the `Value` argument within the `xp cmdshell()` function of the 'ParkingRecord/ExportParkingRecords' API endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** As a temporary workaround, restrict access to the 'ParkingRecord/ExportParkingRecords' API endpoint or disable the `xp cmdshell()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform version 1.3.0 **Description** A path traversal issue exists in the '/SubstationWEBV2/app/..;/main/upfile' endpoint. A remote attacker can manipulate the `path` argument to access files and directories outside the intended folder. Path traversal is a technique that allows an attacker to read arbitrary files on the server by using special character sequences like dot-dot-slash (../). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Shenzhen Sixun Software Sixun Shanghui Group Business Management System version 10 **Description** A SQL injection issue exists in the '/api/Dinner/PayConfig' endpoint. This occurs when the `tableno` argument is manipulated, allowing a remote attacker to execute arbitrary SQL commands. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2 (affected versions not specified) **Description** A remote SQL injection can be triggered via the manipulation of the `sort` argument within the '/SubstationWEBV2/app/..;/calc/getCalcmeterDetailDayListTree' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tiandy Easy7 Integrated Management Platform version 7.17.0 **Description** An issue exists in the API Endpoint component where improper processing of the '/rest/user/updateUserPassword' endpoint allows for remote manipulation. This can lead to weak password recovery. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tiandy Easy7 Integrated Management Platform version 7.17.0 **Description** An issue exists in the file '/Easy7/apps/WebService/GetDBDataEx.jsp' where manipulation of the `strTBName` argument allows for SQL injection, which is a technique used to execute malicious SQL statements that control a database server. This flaw enables remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tiandy Easy7 Integrated Management Platform version 7.17.0 **Description** An OS command injection flaw exists in the '/Easy7/rest/systemInfo/updateDbBackupInfo' endpoint. Remote attackers can exploit this by manipulating the `week` argument, allowing for the execution of arbitrary operating system commands. **Recommendations** Avoid using the `week` argument in the '/Easy7/rest/systemInfo/updateDbBackupInfo' endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform version 1.3.0 **Description** An unrestricted upload issue exists in the file '/SubstationWEBV2/main/uploadH5Files'. Remote attackers can exploit this by manipulating the `File` argument. **Recommendations** Restrict access to the file '/SubstationWEBV2/main/uploadH5Files' to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.