Caginkyr

**Name of the Vulnerable Software and Affected Versions** CodeWise Tornet Scooter Mobile App version 4.75 **Description** An issue exists in an unknown function within the `/TwoFactor` file that allows for improper restriction of excessive authentication attempts. This flaw can be exploited remotely, although the attack is considered highly complex and difficult to execute. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CMS Made Simple versions prior to 2.2.23 **Description** A path traversal issue exists in the UserGuide Module XML Import component. The flaw is located within the ` copyFilesToFolder()` function in the `modules/UserGuide/lib/class.UserGuideImporterExporter.php` library. This allows a remote attacker to manipulate file paths to access or overwrite files outside the intended directory. **Recommendations** Update to version 2.2.23 or later. As a temporary mitigation, restrict access to the UserGuide Module XML Import component.