CVE-2017-14766

The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fnssraddstsubmit function and fnssrdelstsubmit function in functions.php only require knowing the student id number...

CVE-2017-14766

The CVE-2017-14766 issue affects the WordPress Simple Student Result plugin before 1.6.4. It is an Authentication Bypass caused by fn_ssr_add_st_submit() and fn_ssr_del_st_submit() in functions.php that only require a student id number to perform actions, enabling updates or deletions of student ...

CVE-2017-14766

The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fnssraddstsubmit function and fnssrdelstsubmit function in functions.php only require knowing the student id number...

WordPress Plugin WPGYM - SQL Injection

WordPress Plugin WPGYM - SQL Injection Exploit Title: WPGYM - Wordpress Gym Management System - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964 Demo:...

WordPress Plugin WPCHURCH - SQL Injection

WordPress Plugin WPCHURCH - SQL Injection Exploit Title: WPCHURCH - Church Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpchurch-church-management-system-for-wordpress/14292251 Demo:...

SMSmaster - SQL Injection

SMSmaster - SQL Injection Exploit Title: SMSmaster – Multipurpose SMS Gateway for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/smsmaster-multipurpose-sms-gateway-for-wordpress/20605853 Demo:...

WordPress Plugin WPAMS - SQL Injection

WordPress Plugin WPAMS - SQL Injection Exploit Title: WPAMS - Apartment Management System for wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpams-apartment-management-system-for-wordpress/15946837 Demo:...

WordPress Plugin Hospital Management System - SQL Injection

WordPress Plugin Hospital Management System - SQL Injection Exploit Title: Hospital Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/hospital-management-system-for-wordpress/12094634 Demo:...

WordPress Gym Management System SQL Injection

Exploit Title: WPGYM - Wordpress Gym Management System - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/gym/ Version...

WordPress Plugin WPAMS - SQL Injection

Exploit Title: WPAMS - Apartment Management System for wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpams-apartment-management-system-for-wordpress/15946837 Demo:...

WordPress Plugin WPCHURCH - SQL Injection

Exploit Title: WPCHURCH - Church Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpchurch-church-management-system-for-wordpress/14292251 Demo:...

WordPress Plugin WPGYM - SQL Injection

Exploit Title: WPGYM - Wordpress Gym Management System - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/gym/ Version...

WordPress Plugin School Management System - SQL Injection

Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/school/...

Ellucian Banner Student Cross-Site Scripting Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A cross-site scripting vulnerability exists in Ellucian Bann...

Ellucian Banner Student User Enumeration Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A security vulnerability exists in Ellucian Banner Student...

Ellucian Banner Student Arbitrary Password Reset Vulnerability

Ellucian formerly known as SunGard Banner Student is a set of student information management system of the American Ellucian Company. The system has functions such as grade release, student attendance and student information statistics. A security vulnerability exists in Ellucian Banner Student...

CVE-2015-5054

Open redirect vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

CVE-2015-4689

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

Code injection

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests...

Design/Logic Flaw

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...