Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting https://example.com/wp-admin/admin.php?page=rpsresultbatch&edit=%3Cscript%3Ealert/XSS/%3C/script%3E...

WordPress Easy Student Results plugin <= 2.2.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Raad Haddad in WordPress Easy Student Results plugin versions = 2.2.8. Solution Deactivate and delete. This plugin has been closed as of July 11, 2022 and is not available for download. This closure is temporary, pending a full review...

Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API

The plugin lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc PoC When the "Enable API for Mobile Apps" settings...

Gun Database Breach Leaks Details on Thousands of Owners

Plus: Indian hacker-for-hire groups, Chinese student espionage efforts, and more...

Online Student Rate System Access Control Error Vulnerability

Online Student Rate System is an online grading system for students. An Access Control Error vulnerability exists in Online Student Rate System v1.0, which arises from improper access control and can be exploited by any attacker to register as an administrator without authentication...

Online Student Rate System Cross-Site Scripting Vulnerability

Online Student Rate System is an online grading system for students. v1.0 of the Online Student Rate System is vulnerable to a cross-site scripting vulnerability that stems from a lack of validation filtering of user-supplied data and output data in the page parameter of the index.php file. An...

School File Management System Cross-Site Scripting Vulnerability

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Firstnam...

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

CVE-2021-39409

A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...

CVE-2021-39409

A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

Design/Logic Flaw

A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

CVE-2021-39409

CVE-2021-39409 affects Online Student Rate System v1.0. The flaw is an access control error that allows any unauthenticated user to register as an administrator, effectively granting admin privileges and broad control over the system. The issue is documented across multiple sources (Red Hat, CNVD...

CVE-2021-39409

A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

CVE-2021-39408

The CVE-2021-39408 entry applies to Online Student Rate System v1.0. Affected: index.php page parameter handling in the application. Root cause: lack of input validation/escaping of user-supplied data in the page parameter leading to Cross-Site Scripting (XSS). Impact: attacker could cause client...

Online Student Rate System 安全漏洞

Online Student Rate System is an online grading system for students. An Access Control Error vulnerability exists in Online Student Rate System v1.0, which arises from improper access control and can be exploited by any attacker to register as an administrator without authentication...

PT-2022-10911 · Unknown · Online Student Rate System

Name of the Vulnerable Software and Affected Versions: Online Student Rate System version 1.0 Description: A vulnerability exists in the Online Student Rate System that allows any user to register as an administrator without needing to be authenticated. Recommendations: For Online Student Rate...