CVE-2020-35270

Student Result Management System In PHP With Source Code is affected by SQL injection. An attacker can able to access of Admin Panel and manage every account of Result...

Dll Hijacking Vulnerability in Tianxue.com Student Side

Tianxue.com is an intelligent English learning brand for student groups under Beijing Tianxue.com Education Technology Co. A dll hijacking vulnerability exists in the student side of Tianxue.com. An attacker can exploit this vulnerability to execute malicious code...

Mail.ru: Full Account Takeover Student Account In https://********.ru/signin/main/student/email

3rd party project with Mail.ru investitions had no sufficient protection against authentication code bruteforce...

PT-2021-2241 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.10.1 Moodle versions prior to 3.9.4 Moodle versions prior to 3.8.7 Description: The issue is related to insufficient capability checks in some grade-related web services, allowing students to view other students'...

Command Execution Vulnerability in LeTeachLearn Student Client

LeTeachLearn Student is an app that provides attentive after-school tutoring. A command execution vulnerability exists in LeTaoLeXue Student Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

US Schools Are Buying Cell Phone Unlocking Systems

Gizmodo is reporting that schools in the US are buying equipment to unlock cell phones from companies like Cellebrite: Gizmodo has reviewed similar accounting documents from eight school districts, seven of which are in Texas, showing that administrators paid as much $11,582 for the controversial...

CVE-2020-25955

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...

CVE-2020-25955

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...

CVE-2020-25955

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...

CVE-2020-25955

Affected software: SourceCodester Student Management System Project in PHP version 1.0. The CVE-2020-25955 entry describes a stored XSS vulnerability exploitable through the add subject tab. Root cause: input entered via the tab is stored and subsequently reflected, enabling script execution. Imp...

PT-2020-16256 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System Project in PHP version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the 'add subject' tab, allowing for stored XSS attacks...

Student Management System Project PHP 1.0 Cross Site Scripting

For CVE-2020-25955: Exploit Title: student management system project PHP - Stored cross-site scripting Exploit Author: Krishna Yadav Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14443/student-management-system-project-php.html Version: 1.0 Test...

SourceCodester Student Management System Project Cross-Site Scripting Vulnerability

SourceCodester Student Management System is a set of online student management system from SourceCodester, Inc. in the United States. The system provides student information management, announcement management, course management and other functions. A cross-site scripting vulnerability exists in...

UBUNTU-CVE-2020-25700

In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10...

CVE-2020-25700

CVE-2020-25700 affects Moodle: database module web services allowed students to add entries in groups they did not belong to. Affected versions include Moodle 3.9.0–3.9.2, 3.8.0–3.8.5, 3.7.0–3.7.8, 3.5.0–3.5.14 and earlier unsupported releases. The issue is fixed in Moodle 3.8.6, 3.7.9, 3.5.15, a...

ryersonstudentcentre.ca Cross Site Scripting vulnerability OBB-1378971

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

13-year-old student arrested for hacking school computers

By Deeba Ahmed The student faces a felony charge for allegedly hacking an Indiana school district's computer system. This is a post from HackRead.com Read the original post: 13-year-old student arrested for hacking school computers...

Digital Education: The cyberrisks of the online classroom

This past spring, as the COVID-19 pandemic took hold, online learning became the new norm as universities and classrooms around the world were forced to close their doors. By April 29, 2020, more than 1.2 billion children across 186 countries were impacted by school closures. Shortly after school...

openSIS SQL Injection Vulnerability (CNVD-2020-50531)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the fn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50529)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the bmonth parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...