Langchain-Chatchat vulnerable to path traversal

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...

SQL injection vulnerability in the V1***.php file of Yunyu CMS enterprise website management system (CNVD-2018-21987)

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL Injection Vulnerability in V1***.php file of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...