
upset-gal-web_fileRead [CVE-2025-28055]
upset-gal-web v7.1.0 system has an arbitrary file read vulnerability

upset-gal-web v7.1.0 system has an arbitrary file read vulnerability
Here's something encrypted, password is required to continue reading.
Here's something encrypted, password is required to continue reading.
Here's something encrypted, password is required to continue reading.

Due to incorrect usage of the “ORDER BY” clause, there are multiple SQL injection vulnerabilities in novel-plus.