CVE-2024-27712

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism...

CVE-2024-27717

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27713

Eskooly Free Online School management Software v.3.0 and before is vulnerable to a protection mechanism failure (CWE-693) that allows a remote attacker to escalate privileges via the HTTP Response Header Settings component. While no specific patch version is currently identified, it is recommende...

PT-2024-22002 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School management Software versions 3.0 and earlier Description: An issue in the authentication mechanism allows a remote attacker to escalate privileges. Recommendations: For versions 3.0 and earlier, update to a version...

CVE-2024-27710

An issue in the authentication mechanism of Eskooly Free Online School management Software versions 3.0 and before allows a remote attacker to escalate privileges . The vulnerability is accessible over the network and impacts confidentiality, integrity, and availability. While the documents recom...

PT-2024-22005

Name of the Vulnerable Software and Affected Versions Eskooly Free Online School management Software versions 3.0 and earlier Description An issue in the software allows a remote attacker to escalate privileges via the HTTP Response Header Settings component. Recommendations For versions 3.0 and...

PT-2024-22008 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School Management Software versions 3.0 and earlier Description: The issue allows a remote attacker to escalate privileges via the Token Handling component. This is a Cross Site Request Forgery vulnerability...

CVE-2024-27711

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings...

CVE-2024-27713: Protection Mechanism Failure

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27717: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27712: Undefined Security Weakness

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism...

CVE-2024-27711: Improper Privilege Management

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings...

CVE-2024-27715: Unverified Password Change

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism...

CVE-2024-27710: Improper Privilege Management

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism...