Timber E-learning在线考试系统后台 /system/Dep_Right.aspx 参数DEP_NAME2 SQL注入漏洞

0x01漏洞简介 Timber E-learning在线考试系统的后台/system/DepRight.aspx对参数DEPNAME2过滤不严格，导致出现注入漏洞。远程攻击者先需要注册一个用户，登陆后台后可以利用这些漏洞执行SQL指令。该漏洞利用的步骤如下： 1访问页面/usercontrol/ajax.aspx输入用户名密码，进行登陆 http://www..com/usercontrol/ajax.aspx post: Action=post&username=&pwd=&func=Login 登陆成功，将返回true，否则返回false 2登陆成功后，可以利用注入漏洞执行SQL指令...

promotion-sociale-marche.be XSS vulnerability

Vulnerable URL: http://www.promotion-sociale-marche.be/e-learning/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg==%3D=true=TOUS&7880348a71b083f9544b8331e92830aa=de5c42b513f83b302438c4e30c6df000 Details: Description| Value ---|--- Patched:| No Latest che...

Kids Games Learning Math Basic - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Games Learning Math Basic published at the 'play' market has multiple vulnerabilities...

Third Grade Learning Games - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Third Grade Learning Games published at the 'play' market has multiple vulnerabilities...

Learn the alphabet with Zou - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Learn the alphabet with Zou published at the 'play' market has multiple vulnerabilities...

Preschool Learning Games Train - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Preschool Learning Games Train published at the 'play' market has multiple vulnerabilities...

Fun English Language Learning - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fun English Language Learning published at the 'play' market has multiple vulnerabilities...

Kids Chef - learn Math - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kids Chef - learn Math published at the 'play' market has multiple vulnerabilities...

French Learning For Kids - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application French Learning For Kids published at the 'play' market has multiple vulnerabilities...

Kids Toddler Learning Games - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Toddler Learning Games published at the 'play' market has multiple vulnerabilities...

Monki Home - Learning for Kids - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Monki Home - Learning for Kids published at the 'play' market has multiple vulnerabilities...

ABC Learning words toddlers - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ABC Learning words toddlers published at the 'play' market has multiple vulnerabilities...

Kids Preschool Learning Games - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kids Preschool Learning Games published at the 'play' market has multiple vulnerabilities...

Learning Letters Puppy - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Learning Letters Puppy published at the 'play' market has multiple vulnerabilities...

Learn Turkish - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Turkish - 50 languages published at the 'play' market has multiple vulnerabilities...

Kids Toy Phone Learning Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Kids Toy Phone Learning Games published at the 'play' market has multiple vulnerabilities...

Tree house - Learning games - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Tree house - Learning games published at the 'play' market has multiple vulnerabilities...

Early Learning: Sequences - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Early Learning: Sequences published at the 'play' market has multiple vulnerabilities...

Arabic Learning For Kids - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Arabic Learning For Kids published at the 'play' market has multiple vulnerabilities...

Shaun learning games for kids - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Shaun learning games for kids published at the 'play' market has multiple vulnerabilities...