4107 matches found
CVE-2019-11209
The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1;...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information...
SQL Injection
magento/community-edition is vulnerable to SQL injection. The vulnerability exists as a user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications...
Information Disclosure
magento/community-edition is vulnerable to information disclosure. The vulnerability exists as the samples of disabled downloadable products are accessible due to the lack of user input sanitization...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a low-privileged user to make unauthorized environment configuration changes...
Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting Vulnerability Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE :...
CVE-2019-14754
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...
CVE-2019-14754
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...
Sql injection
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...
CVE-2019-14754
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...
CVE-2019-14754
Open-School 3.0 and Community Edition 2.3 are affected by an SQL injection via index.php?r=students/students/document id parameter. The root cause is lack of validation of externally entered SQL statements in the database-based application, allowing an attacker to execute arbitrary SQL commands. ...
Denial Of Service (DoS)
magento/community-edition is vulnerable to denial of service DoS. The vulnerability exists due to the lack of brute-forcing defenses in the token exchange protocol...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists due to an insecure direct object reference issue where the downloadable products folder can be deleted...
Open-School 3.0 / Community Edition 2.3 Cross Site Scripting
Exploit Title: title Date: 2019 08 06 Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE : CVE-2019-14696 Open-School 3.0, and Community Edition 2.3, allows XSS via the...
Open-School 3.0 Community Edition 2.3 - Cross-Site Scripting
Open-School 3.0 Community Edition 2.3 - Cross-Site Scripting Exploit Title: title Date: 2019 08 06 Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE : CVE-2019-14696 Open-School 3.0, and...
PT-2019-13818
Name of the Vulnerable Software and Affected Versions Open-School version 3.0 Community Edition version 2.3 Description The issue allows SQL Injection via the "index.php?r=students/students/document" endpoint, specifically the id parameter. Recommendations For Open-School version 3.0, update to a...
Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting
Exploit Title: title Date: 2019 08 06 Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE : CVE-2019-14696 Open-School 3.0, and Community Edition 2.3, allows XSS via the...
Cross-site Scripting (XSS)
magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of the product information...