Zheng Fu Fang

**Name of the Vulnerable Software and Affected Versions** Grand Vice info Co. webopac7 (affected versions not specified) **Description** The issue concerns the book search field parameter in webopac7, which does not properly restrict the input of special characters. This allows unauthenticated attackers to inject JavaScript syntax remotely and perform reflective XSS attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Grand Vice info Co. webopac7 (affected versions not specified) **Description** The issue concerns the file upload function in webopac7, which fails to filter special characters. This allows remote attackers to upload malicious scripts and execute arbitrary code, potentially controlling the system or interrupting services, by logging in with general user permissions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: igt+ (affected versions not specified) Description: The issue concerns a lack of filtering for special characters in the IGT search function, specifically in certain fields of igt+. This allows remote authenticated attackers to inject malicious JavaScript, leading to DOM-based XSS attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.