CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0900: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2015-4954

Name of the Vulnerable Software and Affected Versions Fumy Teacher's Schedule Board versions 1.10 through 2.21 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For versions 1.10 through 2.21, updat...

某通用型校园系统多处系统越权

简要描述： 见详情 详细说明： 漏洞证明： 看乌云别人提交，看了下： 关键字：SM2005/ 多处越权： 第一处：无需登陆可查看任意教师，任意学期的班级课表 漏洞位置：SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingweb 案例如下： http://www.sdwhys.com/SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingweb http://www.zjnksyzx.com:8801/SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingw...

Fortinet FortiGate XSS Vulnerability (FG-IR-14-003)

FortiOS as used in FortiGate is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Job's Next Run Date Doesn't Match Schedule

Challenge The 'Next Run' date shown for a job does not match the settings selected in the Schedule tab of the job. For example, a job configured to run Monthly on the last Saturday displays a 'Next Run' date of the upcoming Saturday, which is not the last Saturday of the month. Cause This occurs...

i-FTP 2.20 Schedule Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'i-FTP Schedule Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow...

PT-2014-8885

Name of the Vulnerable Software and Affected Versions OpenVAS Manager versions prior to 4.0.6 OpenVAS Manager versions 5.x prior to 5.0.7 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify schedule OMP command...

UBUNTU-CVE-2014-3197

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a...

RunFromProcess - Run a Windows program with a user of another process

RunFromProcess is a command-line utility that allows you to run a program from another process that you choose. The program that you run will be executed as a child of the specified process and it'll run with the same user and security context of the specified parent process. Using RunFromProcess...

CVE-2014-4687

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...

Web Group Communication Center (WGCC) <= 1.0.3 - SQL Injection Vuln

No description provided by source. Title : Web Group Communication Center XSS/SQL Multiple Remote Vulnerabilies Author : myvx Date : 13.05.2008 Application : Web Group Communication Center Version : = 1.0.3 PreRelease 1 Vendor : http://wgcc.de/ Download :...

多个学校教职工密码是弱口令

简要描述： 最近闲来无事，又要考试了，逛了下学校官网，搜了下我们英语老师的课表，居然出了老师的工号，于是尝试登录，果然进了。 详细说明： 学校官网：www.scatc.net GOOGLE:inurl:/jwweb/ 发现用这个系统的有很多学校 打开教师课表，搜索老师的课表，就可以知道老师的工号，用初始密码即可登录成功， 漏洞证明： https://images.seebug.org/upload/201405/19133942899f8d9355f3c2f50ef99ef0b4...

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

Design/Logic Flaw

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

CVE-2014-1989: Undefined Security Weakness

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

PT-2014-4410

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0 through 3.7 SP3 Description The issue allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Recommendations For versions 3.0 through 3.7...

JVN#31230946: Cybozu Garoon API access restriction bypass vulnerability

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an access restriction bypass vulnerability when using APIs. Impact Users who can log in to the system may delete schedule information that they do not have permission to edit. Solution Update the Software Update to the...

Tips for Advanced Scheduling

Purpose This article provides information about advanced scheduling techniques in Veeam Backup & Replication. Solution Scenario 1: Granular Scheduling This advanced scheduling technique allows for a job to be scheduled to run at different times each day. By configuring the job to run "Periodicall...