#php

AMPLE BILLS version 1.0 suffers from a cross site scripting vulnerability.

Aero CMS version 0.0.1 suffers from a cross site request forgery vulnerability.

SchoolPlus LMS version 1.0 suffers from a remote SQL injection vulnerability.

AccPack Khanepani version 1.0 suffers from an insecure direct object reference vulnerability.

AccPack Buzz version 1.0 suffers from an arbitrary file upload vulnerability.

### Summary Navigating to `/admin/index/statistics` with a **logged in Pimcore user** (not an XmlHttpRequest because of this check: [IndexController:125](https://github.com/pimcore/admin-ui-classic-bundle/blob/1.x/src/Controller/Admin/IndexController.php#L125C24-L125C40)) exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the system. > The web server should not return any product and version information of the components used. The table names and row counts should not be exposed. ### Details `/admin/index/statistics` returns the following JSON-response: ``` { { "instanceId": "...", "pimcore_major_version": 11, "pimcore_version": "v11.3.1", "pimcore_hash": "3ecd39f21dbdd25ffdf4bec6e2c860eccfd3d008", "pimcore_platform_version": "v2024.2", "php_version": "8.3.8", "mysql_version": "10.11.8-MariaDB-ubu2204", "bundles": [ //...

Chuksrio LMS version 2.9 suffers from an insecure direct object reference vulnerability.

Blog Site version 1.0 suffers from a remote SQL injection vulnerability.

QuickJob version 6.1 suffers from an ignored default credential vulnerability.

Prison Management System version version 1.0 suffers from an ignored default credential vulnerability.