The X-Hacker

**Name of the Vulnerable Software and Affected Versions** Creative Mind Creator CMS version 5.0 **Description** The issue concerns an unrestricted file upload vulnerability in the file manager. This allows remote attackers to execute arbitrary code. **Recommendations** For Creative Mind Creator CMS version 5.0, update to a version that addresses this issue, as the current version allows remote attackers to execute arbitrary code via file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Creative Mind Creator CMS version 5.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `sideid` parameter in the "index.asp" file. Recommendations: For Creative Mind Creator CMS version 5.0, consider restricting access to the `sideid` parameter in the index.asp file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.