Unnlucky1

**Name of the Vulnerable Software and Affected Versions** mingSoft MCMS version 6.1.1 **Description** A flaw exists in mingSoft MCMS 6.1.1 related to unrestricted file upload. The issue is located within the Template Archive Handler component, specifically in a function associated with the `/ms/file/uploadTemplate.do` file. Manipulation of the `File` argument allows for unrestricted file uploads, and the attack can be initiated remotely. The exploit has been published. **Recommendations** Apply any available updates or patches for mingSoft MCMS version 6.1.1. As a temporary workaround, restrict access to the `/ms/file/uploadTemplate.do` endpoint.

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions through 3.3.1 Description: A SQL injection flaw exists in yanyutao0402 ChanCMS due to manipulation of the `keyword` argument in the `/cms/article/search` file. This issue can be exploited remotely. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions up to 3.3.1 Description: A SQL injection issue exists in an unknown part of the file `/cms/collect/search` in yanyutao0402 ChanCMS. Manipulation of the `keyword` argument may allow for remote exploitation. The exploit has been publicly disclosed. Recommendations: Versions prior to 3.3.2 should be updated.

Name of the Vulnerable Software and Affected Versions: ChanCMS versions prior to 3.3.2 Description: A SQL injection issue exists in ChanCMS. The vulnerability is located in the `/search/` endpoint and can be triggered by manipulating the input with `%20or%201=1%20%23/words.html`. Remote exploitation is possible. Recommendations: Update ChanCMS to version 3.3.2 or later. As a temporary workaround, restrict access to the `/search/` endpoint. Sanitize user input to the `/search/` endpoint to prevent SQL injection attacks.

Name of the Vulnerable Software and Affected Versions: aaluoxiang oa system up to c3a08168c144f27256a90838492c713f55f1b207 Description: A critical issue was found in the `outAddress` function of the External Address Book Handler component, leading to SQL injection. The attack can be initiated remotely. Recommendations: For aaluoxiang oa system up to c3a08168c144f27256a90838492c713f55f1b207, as a temporary workaround, consider disabling the `outAddress` function of the External Address Book Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: y project RuoYi version 4.8.0 Description: A vulnerability has been found in y project RuoYi. It affects an unknown function of the file /monitor/online/batchForceLogout of the component Offline Logout. The manipulation of the `ids` argument leads to improper authorization. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Recommendations: For y project RuoYi version 4.8.0, as a temporary workaround, consider disabling the functionality related to the /monitor/online/batchForceLogout file until a patch is available. Restrict access to the Offline Logout component to minimize the risk of exploitation. Avoid using the `ids` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** westboy CicadasCMS version 2.0 **Description** A critical issue was found in the Scheduled Task Handler component, specifically affecting the /system/schedule/save file. This issue leads to os command injection and can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For westboy CicadasCMS version 2.0, consider restricting access to the /system/schedule/save file of the Scheduled Task Handler component to minimize the risk of exploitation. As a temporary workaround, avoid using the Scheduled Task Handler until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** FastCMS version 0.1.5 **Description** A critical issue affects the JWT Handler component, where the manipulation leads to the use of a hard-coded cryptographic key. The attack can be initiated remotely, with a rather high complexity, making exploitation difficult. **Recommendations** For FastCMS version 0.1.5, consider disabling the JWT Handler component until a patch is available to prevent the use of the hard-coded cryptographic key. At the moment, there is no information about a newer version that contains a fix for this vulnerability.