Katatafish

Name of the Vulnerable Software and Affected Versions: PBEmail 7 ActiveX Edition (affected versions not specified) Description: The issue concerns an absolute path traversal vulnerability in a certain ActiveX control. This vulnerability allows remote attackers to create or overwrite arbitrary files by providing a full pathname in the `XmlFilePath` argument to the `SaveSenderToXml` method. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Web Oddity version 0.09b Description: A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the URI. Recommendations: For Web Oddity version 0.09b, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** GL-SH Deaf Forum versions 6.4.4 and earlier **Description** The issue allows remote attackers to include and execute arbitrary local files. This can be achieved by exploiting directory traversal vulnerabilities through the `FORUM LANGUAGE` parameter to functions.php or the `style` parameter to bottom.php, using a .. (dot dot) sequence. **Recommendations** For GL-SH Deaf Forum versions 6.4.4 and earlier, consider restricting access to the functions.php and bottom.php files until a fix is available. As a temporary workaround, avoid using the `FORUM LANGUAGE` and `style` parameters in the affected API endpoints. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTicket version 1.2 **Description** A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files by utilizing a .. (dot dot) in the `lang` parameter of the qti checkname.php file. **Recommendations** For QuickTicket version 1.2, consider restricting access to the qti checkname.php file or avoiding the use of the `lang` parameter until a fix is available. As a temporary workaround, restrict the ability to include local files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** QuickTalk forum version 1.3 **Description** The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) sequence in the `lang` parameter to specific API endpoints, such as "/qtf checkname.php", "/qtf j birth.php", or "/qtf j exists.php". **Recommendations** For QuickTalk forum version 1.3, consider restricting access to the `lang` parameter in the affected API endpoints until a patch is available. As a temporary workaround, disabling the execution of files from arbitrary locations may help mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Dagger - The Cutting Edge version r23jan2007 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `dir edge lang` parameter in the cal.func.php file. **Recommendations** For Dagger - The Cutting Edge version r23jan2007, as a temporary workaround, consider restricting access to the cal.func.php file until a patch is available. Avoid using the `dir edge lang` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** pagetool version 1.07 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `news id` parameter in a "pagetool news" action. **Recommendations** For pagetool version 1.07, consider restricting access to the `news id` parameter in the "pagetool news" action until a patch is available. Avoid using the `news id` parameter in the affected endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Achievo version 1.1.0 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `config atkroot` parameter in the index.php file. **Recommendations** For Achievo version 1.1.0, avoid using the `config atkroot` parameter in the index.php file until a fix is available. Consider restricting access to the index.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BLOG:CMS versions 4.1.3 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `FADDR` parameter in the list.php file. **Recommendations** For BLOG:CMS versions 4.1.3 and earlier, avoid using the `FADDR` parameter in the list.php file until a fix is available. As a temporary workaround, consider restricting access to the list.php file to minimize the risk of exploitation.