Elymas

**Name of the Vulnerable Software and Affected Versions** Jinher OA version 1.0 **Description** An issue in the file 'nextselectplan.aspx' allows for remote SQL injection. This occurs through the manipulation of the `httpOID` parameter. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to read or modify sensitive database information. **Recommendations** Avoid using the `httpOID` parameter in the 'nextselectplan.aspx' file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Content Management System version 1.0 **Description** An issue exists in the `/admin/edit topic.php` file where improper handling of the `topic id` argument allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `topic id` parameter in the `/admin/edit topic.php` endpoint until the issue is resolved.