Open-School Community Edition 2.2 Cross Site Scripting

============================================================== Title ...| Open-School Community Edition 2.2 Version .| osv2.2-CE.zip Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://sourceforge.net ============================================================== + From admin user:...

Sql injection

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

CVE-2009-4208

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

CVE-2009-4208

CVE-2009-4208 is a SQL injection vulnerability in the os_news module of Open-school (OS) 1.0. The issue allows remote attackers to inject arbitrary SQL commands via the id parameter in the show action of index.php. Public references (NVD, Exploit-DB) confirm the vulnerability, with a base score o...

CVE-2009-4208

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

CVE-2009-4208: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

Open-School 1.0 SQL Injection

Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

Open-school 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

Open-school 1.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Open-school 1.0 id Remote SQL Injection Vulnerability ======================================================= Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio...

Open-school 1.0 - id SQL Injection

Open-school 1.0 - id SQL Injection Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

Open-school 1.0 - 'id' SQL Injection

Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...