Ivan Spiridonov

Name of the Vulnerable Software and Affected Versions: OpenMediaVault version 7.4.17 Description: An issue was discovered in the `changePassword` function within the `/usr/share/php/openmediavault/system/user.inc` file, allowing local authenticated attackers to escalate privileges to root. Recommendations: As a temporary workaround, consider restricting access to the `changePassword` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Weblizar School Management Pro versions through 10.3.4 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation. **Recommendations** For versions through 10.3.4, update to a patched version as soon as possible to secure your systems. As a temporary workaround, consider restricting access to sensitive database queries until a patch is available. Audit plugin usage and review logs for signs of exploitation. Prepare an incident response plan if needed.

**Name of the Vulnerable Software and Affected Versions** BWL Advanced FAQ Manager versions 2.0.3 and earlier **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For BWL Advanced FAQ Manager versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the SQL command functionality until a patch is available. Avoid using user-supplied input in SQL commands without proper sanitization until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** WooCommerce Customers Manager WordPress plugin versions prior to 29.7 **Description** The issue is related to an SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by users with a Subscriber+ role. **Recommendations** For versions prior to 29.7, update the WooCommerce Customers Manager WordPress plugin to version 29.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality for users with the Subscriber+ role until the update is applied.

**Name of the Vulnerable Software and Affected Versions** AIKit versions through 4.14.1 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For versions through 4.14.1, update to a version that includes a fix for this issue, as the current version is affected by the SQL Injection vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Typps Calendarista versions prior to 15.5.7 **Description** The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL code. **Recommendations** For versions prior to 15.5.7, update to version 15.5.7 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** The Fancy Product Designer WordPress plugin versions prior to 6.1.5 **Description** The issue is related to a SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by administrators. **Recommendations** For versions prior to 6.1.5, update to version 6.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's administrative interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** The Smart Manager WordPress plugin versions prior to 8.28.0 **Description** The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection. This can be exploited by high privilege users such as admin. **Recommendations** For versions prior to 8.28.0, update to version 8.28.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation by high privilege users.

**Name of the Vulnerable Software and Affected Versions** The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin version 1.5.3 **Description** The issue arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries, allowing authenticated attackers with editor access or higher to append additional SQL queries into existing ones. This can potentially lead to unauthorized access to sensitive information from the database. The vulnerability is exploited via multiple JSON parameters in the "/wp-json/burst/v1/data/compare" endpoint, including `browser`, `device`, `page id`, `page url`, `platform`, and `referrer`. **Recommendations** For version 1.5.3, as a temporary workaround, consider disabling access to the "/wp-json/burst/v1/data/compare" endpoint until a patch is available. Restrict access to the affected parameters, including `browser`, `device`, `page id`, `page url`, `platform`, and `referrer`, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.