CVE Vulnerability Advisory Database

[Affected Scope] Cisco Unified Communications Manager (Unified CM), Unified CM SME, Unified CM IM&P, Cisco Unity Connection, and Webex Calling Dedicated Instance

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands via the web management interface and escalate privileges to root

[Mitigation] Apply official Cisco security patches immediately and restrict network access to the web-based management interface

[Affected Scope] Systems running telnetd from GNU Inetutils versions up to and including 2.7.

[Impact] Remote attackers can bypass authentication and gain complete root access to the target system by injecting '-f root' into the USER environment variable.

[Mitigation] Apply the official vendor patches immediately, or disable the telnetd service and transition to secure protocols like SSH.

[Affected Scope] Oracle HTTP Server and WebLogic Server Proxy Plug-in (for Apache HTTP Server and IIS) versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 within Oracle Fusion Middleware.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to compromise the server, leading to unauthorized data modification, deletion, or complete system takeover with potential scope expansion to backend systems (CVSS 10.0).

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, restrict network access, and deploy WAF rules to filter malicious HTTP headers.

[Affected Scope] birkir prime versions up to and including 0.4.0.beta.0 at the /graphql endpoint

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) by exhausting server resources via malicious batch queries

[Mitigation] Implement strict request size limits, disable or restrict GraphQL batching, and deploy WAF rules to block anomalous payloads

[Affected Scope] EyouCMS up to version 1.7.1 and 5.0, specifically within the Member Avatar Handler component.

[Impact] Unauthenticated remote attackers can bypass access controls to upload arbitrary files or trigger file inclusion, leading to complete Remote Code Execution (RCE).

[Mitigation] Restrict external access to the vulnerable API endpoint, deploy WAF rules, and monitor for official vendor patches.

[Affected Scope] EasyCMS versions up to and including 1.6, specifically affecting the '_order' parameter in '/UserAction.class.php'.

[Impact] Unauthenticated remote attackers can manipulate the '_order' parameter to execute arbitrary SQL commands, leading to complete database compromise, sensitive data exfiltration, or potential remote code execution.

[Mitigation] Since the vendor has not responded with an official patch, immediately deploy Web Application Firewall (WAF) rules and manually implement strict whitelist validation on the affected PHP source code.

[Affected Scope] xiweicheng TMS up to version 2.28.0

[Impact] Unauthenticated remote attackers can access internal network resources, invoke internal APIs, or potentially escalate to Remote Code Execution (RCE)

[Mitigation] Apply the latest security patches, sanitize the 'url' parameter in HtmlUtil.java, or deploy WAF rules to block outbound requests to private IP ranges

[Affected Scope] xiweicheng TMS up to and including version 2.28.0

[Impact] Unauthenticated remote attackers can upload arbitrary malicious files, leading to Remote Code Execution (RCE) on the target server

[Mitigation] Disable execution permissions on the upload directory, enforce strict file extension validation, or apply the latest security patches

[Affected Scope] FeMiner wms up to commit 9cad1f1b179a98b9547fd003c23b07c7594775fa

[Impact] Unauthenticated remote attackers can manipulate the Username parameter to execute arbitrary SQL commands and compromise the database

[Mitigation] Implement parameterized queries in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Cal.com versions from 3.1.6 to before 6.0.7

[Impact] Attackers can gain full authenticated access to any user's account by supplying a target email address via session.update() without credentials

[Mitigation] Immediately upgrade Cal.com to version 6.0.7 or later

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and gain full control of the target server.

[Mitigation] Apply the official Microsoft security patches immediately and restrict external access to SharePoint web interfaces until patched.

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Desktop Windows Manager (DWM) component

[Impact] An authorized local attacker can disclose sensitive information from kernel or process memory, potentially facilitating subsequent privilege escalation

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict unauthorized local access on unpatched systems

[Affected Scope] Administrator panel component (/Administrator/PHP/AdminViewSongs.php) in code-projects Online Music Site 1.0

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to execute arbitrary SQL commands, leading to complete database compromise

[Mitigation] Implement parameterized queries (Prepared Statements) immediately and restrict external access to the administrator directory

[Affected Scope] code-projects Online Music Site 1.0, specifically the /FrontEnd/Albums.php endpoint

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to extract sensitive database information or compromise the underlying system

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious SQL patterns

[Affected Scope] code-projects Online Music Site 1.0, specifically the /login.php endpoint

[Impact] Unauthenticated remote attackers can bypass authentication, extract sensitive database records, or potentially execute arbitrary system commands via SQL injection

[Mitigation] Implement parameterized queries (Prepared Statements) in the source code and deploy Web Application Firewall (WAF) rules to block malicious payloads

[Affected Scope] Campcodes Supplier Management System version 1.0, specifically the /retailer/edit_profile.php endpoint.

[Impact] Unauthenticated remote attackers can manipulate the txtRetailerAddress parameter to compromise the database, extract sensitive data, or potentially achieve remote code execution.

[Mitigation] Implement parameterized queries (Prepared Statements), sanitize user inputs, and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.

[Affected Scope] Zimbra Collaboration (ZCS) versions before 10.0.18 and 10.1 versions before 10.1.13

[Impact] Attackers can execute arbitrary JavaScript code and steal session tokens in the context of the Classic UI when a user views a malicious HTML email.

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to the patched versions (10.0.18, 10.1.13, or later).

[Affected Scope] code-projects Online Product Reservation System 1.0, specifically the /handgunner-administrator/register_code.php component

[Impact] Unauthenticated remote attackers can manipulate user registration parameters to execute arbitrary SQL commands, leading to full database compromise and potential remote code execution

[Mitigation] Implement parameterized queries (Prepared Statements) for all user inputs and restrict access to the registration endpoint using WAF or web server configurations

[Affected Scope] The /pages.php endpoint of code-projects Content Management System (CMS) version 1.0.

[Impact] Unauthenticated remote attackers can manipulate the ID parameter to extract sensitive database information or potentially execute remote code depending on database privileges.

[Mitigation] Implement input validation and parameterized queries (Prepared Statements), and deploy Web Application Firewall (WAF) rules to block malicious SQL payloads.

[Affected Scope] code-projects Content Management System 1.0, specifically the /admin/edit_posts.php component.

[Impact] Remote attackers can bypass authorization to upload malicious PHP web shells, leading to arbitrary system command execution on the host server.

[Mitigation] Implement strict file extension validation in the source code, disable script execution in the upload directory, or deploy WAF rules.