CVE-2017-16561: Improper Neutralization of Special Elements used in an SQL Command

/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...

Ingenious School Management System 2.3.0 - friend_index SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious 2.3.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious 2.3.0 - Arbitrary File Upload

Ingenious 2.3.0 - Arbitrary File Upload Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

Arbitrary file deletion

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

CVE-2017-15957 affects Ingenious School Management System 2.3.0: the file my_profile.php allows a student or teacher to upload an arbitrary file. Public references (Exploit-DB, 0day) document an arbitrary file upload capability, with PoCs targeting the my_profile.php and uploads paths. The vulner...

CVE-2017-15957: Unrestricted Upload of File with Dangerous Type

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

PT-2017-14310

Name of the Vulnerable Software and Affected Versions Ingenious School Management System version 2.3.0 Description The issue allows a student or teacher to upload an arbitrary file through the my profile.php script. Recommendations For Ingenious School Management System version 2.3.0, restrict...

Ingenious School Management System 2.3.0 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 29.09.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

Ingenious School Management System 2.3.0 Arbitrary File Upload

Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 29.09.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: N/...

CVE-2017-14843: Improper Neutralization of Special Elements used in an SQL Command

Mojoomla School Management System for WordPress allows SQL Injection via the id parameter...

CVE-2017-14843

Mojoomla School Management System for WordPress is affected by a SQL injection via the id parameter. Root cause: insufficient input validation allowing attackers to inject arbitrary SQL. Impact (per CVSS data): high confidentiality, integrity, and availability impact with network access and low a...

WordPress School Management System Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo:...

PT-2017-13720

Name of the Vulnerable Software and Affected Versions Mojoomla School Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...

WordPress Plugin School Management System - SQL Injection

Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/school/...

WordPress Plugin School Management System - SQL Injection

WordPress Plugin School Management System - SQL Injection Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo:...

SOA - School Management System 3.0 Shell Upload

======================================================== SOA - School Management System 3.0 - Arbitary file upload Description : attacker who has access to the administrative panel can upload arbitray file which may lead to total compromise of the web server Proof of Concept : -...