Nu11Secur1Ty

**Name of the Vulnerable Software and Affected Versions** Senayan Library Management System version 9.0.0 **Description** An issue exists where the `class` parameter allows the injection of malicious SQL queries. This can be exploited by submitting crafted payloads to manipulate database queries and potentially extract sensitive information. SQL injection is a type of flaw that occurs when an attacker can interfere with the queries that an application makes to its database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Social-Share-Buttons version 2.2.3 **Description** The software contains a SQL injection issue in the `project id` parameter. Attackers can exploit this by sending specially crafted POST requests with malicious SQL payloads to manipulate database queries. Successful exploitation could allow attackers to retrieve and potentially steal the entire database content. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AimOne Video Converter version 2.04 Build 103 **Description** AimOne Video Converter version 2.04 Build 103 contains a buffer overflow in its registration form, leading to application crashes and a denial of service. An attacker can create a 7000-byte payload to trigger this issue and potentially exploit the software’s registration mechanism. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Zippy CRM version 6.5.4 **Description** The software contains a reflected cross-site scripting issue that enables attackers to inject malicious scripts via unvalidated input parameters. Attackers can submit crafted payloads in manual insertion points to execute arbitrary JavaScript code within a victim’s browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Aero CMS version 0.0.1 **Description** Aero CMS version 0.0.1 has a SQL injection issue in the `author` parameter. This allows manipulation of database queries using boolean-based, error-based, time-based, and UNION query techniques. Successful exploitation could lead to the extraction of sensitive database information and potential system compromise. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the `author` parameter to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** Concrete5 CMS version 9.1.3 **Description** Concrete5 CMS version 9.1.3 is subject to an XPath injection issue. Attackers can manipulate URL path parameters with malicious payloads. By sending crafted requests, attackers may be able to extract internal content paths and system information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ever Gauzy version 0.281.9 **Description** The software contains a JWT authentication issue due to a weak HMAC secret key implementation. This allows attackers to exploit the exposed JWT token to authenticate and gain unauthorized access, potentially with administrative permissions. Attackers can forge JWT tokens to achieve instant admin access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kimai version 1.30.10 **Description** Kimai version 1.30.10 has a SameSite cookie flaw that allows attackers to steal user session cookies. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, potentially leading to session hijacking. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Spip version 4.1.10 **Description** Spip 4.1.10 is affected by a file upload issue. This allows attackers to upload malicious SVG files containing external links. An attacker can potentially trick administrators into clicking a crafted SVG logo, redirecting them to a dangerous URL due to insufficient file upload filtering. The vulnerability involves improper filtering of uploaded files, specifically SVG files, enabling the inclusion of external links within them. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict file uploads to trusted file types only. Implement stricter file upload validation to prevent the upload of SVG files with embedded external links.

**Name of the Vulnerable Software and Affected Versions** Jorani version 1.0.3 **Description** The software contains a reflected cross-site scripting issue in the `language` parameter. An attacker can inject malicious scripts by crafting XSS payloads within this parameter, potentially enabling the execution of arbitrary JavaScript and the theft of user session information. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the `language` parameter to prevent the injection of malicious scripts.

**Name of the Vulnerable Software and Affected Versions** Member Login Script version 3.3 **Description** The software contains a client-side desynchronization issue related to how HTTP requests are handled. Specifically, the vulnerability stems from the parsing of the Content-Length header. An attacker can craft malicious POST requests that include smuggled secondary requests. This manipulation can potentially bypass server-side request processing controls. The `Content-Length` header is a key component in this attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bus Reservation System version 1.1 **Description** The Bus Reservation System version 1.1 contains a SQL injection issue in the `pickup id` parameter. This allows attackers to manipulate database queries using boolean-based, error-based, and time-based blind SQL injection techniques. Successful exploitation could lead to information theft from the database. **Recommendations** Address the SQL injection issue in the `pickup id` parameter.

**Name of the Vulnerable Software and Affected Versions** Soosyze version 2.0.0 **Description** The application has a file upload issue that permits attackers to upload arbitrary HTML files containing PHP code. This broken file upload mechanism could allow attackers to view sensitive file paths and execute malicious PHP scripts on the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WEBIGniter version 28.7.23 **Description** The software contains a file upload issue that permits authenticated attackers to upload and execute malicious PHP files via the media function. An attacker with any valid account can upload PHP scripts, leading to remote code execution on the application server. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict file upload functionality to trusted users only.

**Name of the Vulnerable Software and Affected Versions** dawa-pharma version 1.0 **Description** The application allows unauthenticated attackers to execute SQL queries on the server. Successful exploitation could lead to access of sensitive information and potential administrative access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Old Age Home Management version 1.0 **Description** The issue concerns SQL Injection via the `username` parameter. This allows for potential unauthorized access or manipulation of data. **Recommendations** For Old Age Home Management version 1.0, consider restricting access to the `username` parameter until a patch is available. As a temporary workaround, avoid using the `username` parameter in sensitive operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Atropim version 1.5.26 **Description** The issue is related to Directory Traversal. **Recommendations** For Atropim version 1.5.26, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Purchase Order Management version 1.0 **Description** The issue allows attackers to execute arbitrary code via a crafted file uploaded to the server. This is due to an arbitrary file upload vulnerability. **Recommendations** For Purchase Order Management version 1.0, consider disabling the file upload feature until a patch is available to prevent exploitation. Restrict access to the server to minimize the risk of arbitrary code execution.

**Name of the Vulnerable Software and Affected Versions** Employee Performance Evaluation System version 1.0 **Description** The issue allows attackers to execute arbitrary code via a crafted file uploaded to the server. This is due to an arbitrary file upload vulnerability in the system. **Recommendations** For Employee Performance Evaluation System version 1.0, consider restricting file uploads to only necessary and validated files to minimize the risk of exploitation. As a temporary workaround, consider disabling file upload functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Online Pizza Ordering version 1.0 **Description** The issue allows attackers to execute arbitrary code via a crafted file uploaded to the server. This is due to an arbitrary file upload vulnerability. **Recommendations** For Online Pizza Ordering version 1.0, consider disabling the file upload feature until a patch is available to prevent exploitation of the arbitrary file upload vulnerability. Restrict access to the server to minimize the risk of arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.