Str0Ke

**Name of the Vulnerable Software and Affected Versions** OneCMS version 2.4 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `abc` parameter in the userreviews.php file. **Recommendations** For OneCMS version 2.4, avoid using the `abc` parameter in the userreviews.php file until a fix is available. As a temporary workaround, consider restricting access to the userreviews.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BellaBiblio (affected versions not specified) **Description** The issue allows remote attackers to potentially gain administrative privileges. It involves setting a `bellabiblio` cookie with a specific value. However, it's noted that the cookie value must be an MD5 hash, which is a disputed aspect of this issue by multiple parties, including CVE. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sony Network Camera SNC-RZ25N versions 1.30 and earlier Sony Network Camera SNC-P1 versions 1.29 and earlier Sony Network Camera SNC-P5 versions 1.29 and earlier Sony Network Camera SNC-CS10 versions 1.06 and earlier Sony Network Camera SNC-CS11 versions 1.06 and earlier Sony Network Camera SNC-DF40N versions 1.18 and earlier Sony Network Camera SNC-DF70N versions 1.18 and earlier Sony Network Camera SNC-RZ50N versions 2.22 and earlier Sony Network Camera SNC-CS50N versions 2.22 and earlier Sony Network Camera SNC-DF85N versions 1.12 and earlier Sony Network Camera SNC-DF80N versions 1.12 and earlier Sony Network Camera SNC-DF50N versions 1.12 and earlier Sony Network Camera SNC-RX570N/W versions 3.00 and 2.x through 2.31 Sony Network Camera SNC-RX570N/B versions 3.00 and 2.x through 2.31 Sony Network Camera SNC-RX550N/W versions 3.00 and 2.x through 2.31 Sony Network Camera SNC-RX550N/B versions 3.00 and 2.x through 2.31 Sony Network Camera SNC-RX530N/W versions 3.00 and 2.x through 2.31 Sony Network Camera SNC-RX530N/B versions 3.00 and 2.x through 2.31 **Description** A heap-based buffer overflow issue exists in the viewer ActiveX control, allowing remote attackers to execute arbitrary code via a long first argument to the `PrmSetNetworkParam` method. **Recommendations** For Sony Network Camera SNC-RZ25N version 1.30 and earlier, update to version 1.30 or later. For Sony Network Camera SNC-P1 version 1.29 and earlier, update to version 1.29 or later. For Sony Network Camera SNC-P5 version 1.29 and earlier, update to version 1.29 or later. For Sony Network Camera SNC-CS10 version 1.06 and earlier, update to version 1.06 or later. For Sony Network Camera SNC-CS11 version 1.06 and earlier, update to version 1.06 or later. For Sony Network Camera SNC-DF40N version 1.18 and earlier, update to version 1.18 or later. For Sony Network Camera SNC-DF70N version 1.18 and earlier, update to version 1.18 or later. For Sony Network Camera SNC-RZ50N version 2.22 and earlier, update to version 2.22 or later. For Sony Network Camera SNC-CS50N version 2.22 and earlier, update to version 2.22 or later. For Sony Network Camera SNC-DF85N version 1.12 and earlier, update to version 1.12 or later. For Sony Network Camera SNC-DF80N version 1.12 and earlier, update to version 1.12 or later. For Sony Network Camera SNC-DF50N version 1.12 and earlier, update to version 1.12 or later. For Sony Network Camera SNC-RX570N/W versions 3.00 and 2.x through 2.31, update to version 2.31 or later. For Sony Network Camera SNC-RX570N/B versions 3.00 and 2.x through 2.31, update to version 2.31 or later. For Sony Network Camera SNC-RX550N/W versions 3.00 and 2.x through 2.31, update to version 2.31 or later. For Sony Network Camera SNC-RX550N/B versions 3.00 and 2.x through 2.31, update to version 2.31 or later. For Sony Network Camera SNC-RX530N/W versions 3.00 and 2.x through 2.31, update to version 2.31 or later. For Sony Network Camera SNC-RX530N/B versions 3.00 and 2.x through 2.31, update to version 2.31 or later.

**Name of the Vulnerable Software and Affected Versions** phpGalleryScript version 1.0 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `include class` parameter in the init.gallery.php file. **Recommendations** For phpGalleryScript version 1.0, consider restricting access to the `include class` parameter in the init.gallery.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Http explorer version 1.02 Description: A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) sequence in the URI. Recommendations: For version 1.02, update to a newer version that addresses this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kai Blankenhorn Bitfolge simple and nice index file (aka snif) versions 1.5.2 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `externalConfig` parameter. However, it's noted that `$externalConfig` is defined before use, which has led to disputes about this vulnerability from CVE and other third parties. **Recommendations** For versions 1.5.2 and earlier, consider restricting access to the `externalConfig` parameter in the index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gCards version 1.13 **Description** A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code. This is achieved via a URL in the `languagefile` parameter in the addnews.php file. However, it has been observed that `languageFile` is defined before use, which may affect the vulnerability's impact. **Recommendations** For gCards version 1.13, consider restricting access to the addnews.php file or the `languagefile` parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the `languagefile` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** newsReporter versions 1.1 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `news include path` parameter in the index.php file. **Recommendations** For newsReporter versions 1.1 and earlier, avoid using the `news include path` parameter in the index.php file until a fix is available. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** YaBB SE versions 1.5.5 and earlier **Description** The issue allows remote attackers to execute SQL commands via a double-encoded `user` parameter in a "viewprofile" action. This is a SQL injection vulnerability in the profile.php file. **Recommendations** For YaBB SE versions 1.5.5 and earlier, update to a version later than 1.5.5 to resolve the issue. As a temporary workaround, consider restricting access to the profile.php file or disabling the viewprofile action until a patch is available. Avoid using double-encoded user parameters in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Eitsop My Web Server version 1.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a long GET request. **Recommendations** For Eitsop My Web Server version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Basic Analysis and Security Engine (BASE) versions 1.2.4 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved by providing a URL in the `BASE path` parameter to specific API endpoints, such as "base qry common.php", "base stat common.php", and "includes/base include.inc.php". **Recommendations** For versions 1.2.4 and earlier, disable the register globals setting to prevent exploitation. Additionally, consider restricting access to the vulnerable API endpoints until a fix is available. As a temporary workaround, avoid using the `BASE path` parameter in the affected endpoints.