SQL injection vulnerability in the article submission interface of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the article submission interface of S-CMS School Building System. An attacker can exploit the...

Ingenious School Management System - id SQL Injection

Ingenious School Management System - id SQL Injection Exploit Title: Ingenious School Management System - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/4945/ingenious-school-management-system Version...

Ingenious School Management System SQL Injection

Exploit Title: Ingenious School Management System - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/4945/ingenious-school-management-system Version: All Version Exploit :...

Ingenious School Management System - 'id' SQL Injection

Exploit Title: Ingenious School Management System - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/4945/ingenious-school-management-system Version: All Version Exploit :...

School Management Script 3.0.4 SQL Injection

Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4. Date: 26/02/2018 Exploit Author: Samiran Santra Vendor Homepage: https://www.phpscriptsmall.com Software Link: https://www.phpscriptsmall.com/product/school-management-system Version: v3.0.4 Tested on: Windows...

Sql injection

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

CVE-2017-16561

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

CVE-2017-16561

CVE-2017-16561 affects Ingenious School Management System 2.3.0. Affected component: /view/friend_profile.php; vulnerability: Boolean-based and Time-based SQL injection in the GET parameter friend_index. Root cause: improper handling/concatenation of user input into SQL, enabling attacker to infl...

CVE-2017-16561

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

Ingenious School Management System 2.3.0 - friend_index SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious 2.3.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious 2.3.0 - Arbitrary File Upload

Ingenious 2.3.0 - Arbitrary File Upload Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

Arbitrary file deletion

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

CVE-2017-15957 affects Ingenious School Management System 2.3.0: the file my_profile.php allows a student or teacher to upload an arbitrary file. Public references (Exploit-DB, 0day) document an arbitrary file upload capability, with PoCs targeting the my_profile.php and uploads paths. The vulner...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

Ingenious School Management System 2.3.0 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 29.09.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious School Management System 2.3.0 Arbitrary File Upload

Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 29.09.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: N/...

CVE-2017-14843

Mojoomla School Management System for WordPress is affected by a SQL injection via the id parameter. Root cause: insufficient input validation allowing attackers to inject arbitrary SQL. Impact (per CVSS data): high confidentiality, integrity, and availability impact with network access and low a...