Hebing123

Name of the Vulnerable Software and Affected Versions Dokuwiki version 2025-05-14b Description A flaw exists in Dokuwiki version 2025-05-14b 'Librarian' that could allow a remote attacker to cause a denial of service. The issue is related to the `media upload xhr()` function within the `media.php` file. Recommendations Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Emlog versions prior to 2.6.1 **Description** Emlog is a website building system. Versions prior to 2.6.1 expose a REST API endpoint ('/index.php?rest-api=upload') for media file uploads. This endpoint does not properly validate file types, extensions, or content, allowing authenticated attackers with a valid API key or admin session cookie to upload arbitrary files, including malicious PHP scripts. Once uploaded, these files can be executed, potentially leading to remote code execution (RCE) and full server compromise. Attackers can obtain the API key by gaining administrator access or through information disclosure vulnerabilities within the application. **Recommendations** Versions prior to 2.6.1 should be updated to version 2.6.1 or later.

**Name of the Vulnerable Software and Affected Versions** Yonyou UFIDA ERP-NC version 5.0 **Description** A vulnerability was found in Yonyou UFIDA ERP-NC, affecting an unknown functionality of the file /help/top.jsp. The manipulation of the `langcode` argument leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** As a temporary workaround, consider restricting access to the /help/top.jsp file until a patch is available. Avoid using the `langcode` argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GeSHi versions up to 1.0.9.1 **Description** A problematic issue has been found in GeSHi, affecting the `get var` function of the `/contrib/cssgen.php` file in the CSS Handler component. The manipulation of the `default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments` argument leads to cross-site scripting. This issue can be exploited remotely. **Recommendations** For GeSHi versions up to 1.0.9.1, consider disabling the `get var` function in the `/contrib/cssgen.php` file as a temporary workaround until a patch is available. Restrict access to the CSS Handler component to minimize the risk of exploitation. Avoid using the `default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments` argument in the affected function until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Emlog Pro versions up to 2.4.1 **Description** A problem has been found in Emlog Pro that affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For Emlog Pro versions up to 2.4.1, consider disabling access to the /admin/plugin.php file until a patch is available. As a temporary workaround, restrict the manipulation of the argument filter to minimize the risk of cross site scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Emlog Pro versions up to 2.4.1 **Description** A problem has been found in Emlog Pro that affects an unknown part of the file /admin/tag.php. The manipulation of the `keyword` argument leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For Emlog Pro versions up to 2.4.1, as a temporary workaround, consider disabling access to the `/admin/tag.php` file until a patch is available. Restrict the manipulation of the `keyword` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Emlog Pro versions up to 2.4.1 **Description** A vulnerability was found in Emlog Pro, affecting unknown code of the file /admin/user.php. The manipulation of the `keyword` argument leads to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For Emlog Pro versions up to 2.4.1, as a temporary workaround, consider disabling access to the `/admin/user.php` file until a patch is available. Restrict the manipulation of the `keyword` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 115cms up to 20240807 **Description** A vulnerability was found in an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the `type` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For 115cms up to 20240807, as a temporary workaround, consider restricting access to the /index.php/admin/web/set.html file until a patch is available. Avoid using the `type` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 115cms up to 20240807 **Description** A vulnerability was found in an unknown function of the file /index.php/admin/web/file.html, which can be exploited to launch a cross-site scripting attack remotely by manipulating the `ks` argument. The exploit has been disclosed to the public. **Recommendations** For 115cms up to 20240807, as a temporary workaround, consider restricting access to the /index.php/admin/web/file.html file until a patch is available. Avoid using the `ks` argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 115cms versions up to 20240807 **Description** A vulnerability was found in the processing of the file /app/admin/view/web user.html, where the manipulation of the argument `ks` leads to cross-site scripting. The attack may be initiated remotely. **Recommendations** For versions up to 20240807, as a temporary workaround, consider restricting access to the file /app/admin/view/web user.html and avoid using the argument `ks` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 115cms up to 20240807 **Description** A problematic vulnerability has been found in 115cms, affecting an unknown part of the file /index.php/admin/web/appurladd.html. The manipulation of the `tid` argument leads to cross-site scripting. It is possible to initiate the attack remotely. The vendor was contacted about this disclosure but did not respond. **Recommendations** For 115cms up to 20240807, as a temporary workaround, consider restricting access to the /index.php/admin/web/appurladd.html file until a patch is available. Avoid using the `tid` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 115cms versions up to 20240807 **Description** A vulnerability was found in some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the `ks` argument leads to cross-site scripting. The attack may be launched remotely. **Recommendations** For versions up to 20240807, as a temporary workaround, consider restricting access to the /index.php/admin/web/useradmin.html file until a patch is available. Avoid using the `ks` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AutoCMS version 5.4 **Description** A SQL injection vulnerability was discovered in AutoCMS via the `sidebar` parameter at the "/admin/robot.php" API endpoint. This issue can be exploited, potentially allowing unauthorized access to sensitive data. **Recommendations** For AutoCMS version 5.4, as a temporary workaround, consider restricting access to the "/admin/robot.php" API endpoint or disabling the use of the `sidebar` parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AutoCMS version 5.4 **Description** The issue allows attackers to execute arbitrary PHP code via injecting a crafted value into the `txtsite url` parameter at the "/admin/site add.php" API endpoint. This enables attackers to inject malicious PHP code, potentially leading to unauthorized access or control of the system. **Recommendations** For AutoCMS version 5.4, as a temporary workaround, consider restricting access to the "/admin/site add.php" API endpoint to minimize the risk of exploitation. Additionally, avoid using the `txtsite url` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcuToWeb server version 10.5.0.7577C8b **Description** A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the "index.php" component. This enables the attacker to perform unauthorized actions on the affected system. **Recommendations** For AcuToWeb server version 10.5.0.7577C8b, consider disabling the "index.php" component until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ampache versions prior to 6.6.0 **Description** The issue is a stored cross-site scripting (XSS) vulnerability in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions can exploit this by setting the `Name` field to malicious code, such as `<svg onload=alert(8)>`, which will affect administrators or users accessing the Democratic functionality. This can lead to the attacker obtaining cookies of affected users. The vulnerability is exploited through the `democratic.php` file. **Recommendations** For versions prior to 6.6.0, update to version 6.6.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xinhu RockOA version 2.6.3 **Description** A reflected cross-site scripting (XSS) issue was found in Xinhu RockOA. The issue is related to the `/chajian/inputChajian.php` component. **Recommendations** For Xinhu RockOA version 2.6.3, consider restricting access to the `/chajian/inputChajian.php` component until a fix is available. Avoid using this component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Xinhu RockOA version 2.6.3 **Description** A reflected cross-site scripting (XSS) issue was found in Xinhu RockOA via the `num` parameter at the "/flow/flow.php" endpoint. **Recommendations** For version 2.6.3, avoid using the `num` parameter in the "/flow/flow.php" endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** StrongShop version 1.0 **Description** A Server-Side Template Injection (SSTI) issue was found in the /shippingOptionConfig/index.blade.php component. **Recommendations** For StrongShop version 1.0, consider restricting access to the vulnerable /shippingOptionConfig/index.blade.php component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xinhu RockOA version 2.6.3 **Description** A reflected cross-site scripting (XSS) issue was found in the /kaoqin/tpl kaoqin locationchange.html component. **Recommendations** For version 2.6.3, consider disabling access to the /kaoqin/tpl kaoqin locationchange.html component until a patch is available.