CVE-2015-4689

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

Design/Logic Flaw

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

CVE-2015-4688

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests...

CVE-2015-4689

CVE-2015-4689 affects Ellucian Banner Student, versions 8.5.1.2 through 8.7. The vulnerability allows remote attackers to reset arbitrary passwords via unspecified vectors. The provided sources describe the issue as a “Weak Password Reset” vulnerability but do not specify the exact attack vector,...

CVE-2015-5054

Open redirect vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter...

CVE-2015-4688

Ellucian Banner Student versions 8.5.1.2 through 8.7 are affected by CVE-2015-4688, allowing remote attackers to enumerate user accounts via a series of requests. The available connected records confirm the product (Ellucian Banner Student) and the impact (account enumeration). No explicit root-c...

CVE-2015-4687

CVE-2015-4687 corresponds to a Cross-Site Scripting (XSS) vulnerability in Ellucian Banner Student (formerly SunGard) version 8.5.1.2. The linked sources confirm an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available records do ...

CVE-2015-5054

The CVE-2015-5054 entry concerns an open redirect vulnerability in Ellucian Banner Student, version range 8.5.1.2 through 8.7. The issue is triggered by an attacker-supplied URL parameter that can redirect users to arbitrary external sites, enabling phishing. The connected documents confirm the p...

CVE-2015-4687

Cross-site scripting XSS vulnerability in Ellucian formerly SunGard Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4689

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

student-learn.ru XSS vulnerability

Vulnerable URL: http://student-learn.ru/conspect.php?t=primer-prognoza-vremennogo-ryada"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11498359 VIP website status:| No...

smc.edu XSS vulnerability

Vulnerable URL: http://www.smc.edu/StudentServices/EOPS/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2181...

Override access vulnerability in the Academic Management System of the Gardener Teaching and Learning Management Platform

The Gardener Instructional Management Platform is a comprehensive school management platform that focuses on teaching as an integrated management program. There is an override access vulnerability in the academic management system of the Gardener Teaching Management Platform. After logging in to...

High Schooler Nets $10,000 For Google Bug

Google fixed a bug last month that could have let anyone access an internal Google website and in turn access sensitive data. The company awarded a hefty $10,000 bounty to the researcher that uncovered it, Ezequiel Pereira, an Uruguayan high school student, last Friday. Pereira stumbled upon the...

Information Disclosure

Moodle is vulnerable to information disclosure. The library does not properly hide student information during blind marking, allowing a malicious users to view student information on code inspection...

Privilege Escalation

Moodle is vulnerable to privilege escalations. On big installations, when the sync script was run it would improperly assign a manager role to suspended student accounts, granting these accounts the same access rights as a manager role...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS. Authenticated attackers can leverage a flaw in the survey module and the student role to inject web script into a survey answer...

WordPress IBPS Online Exam plugin <=1.0 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found in WordPress IBPS Online Exam plugin =1.0 versions. Blind SQL Injection possible when logged in as a student. Solution 2017.07.29 - We were unable to find information about patched release of WordPress IBPS Online Exam plugin. Also, we were...

WordPress IBPS Online Exam plugin <=1.0 - Authenticated Stored Cross-site scripting (XSS) vulnerability

Authenticated Stored Cross-site scripting XSS vulnerability found in WordPress IBPS Online Exam plugin =1.0 versions by 8bitsec. The attack is possible when logged in as a student. Solution 2017.07.29 - We were unable to find information about patched release of WordPress IBPS Online Exam plugin...

student.wiki.pisd.edu XSS vulnerability

Vulnerable URL: http://student.wiki.pisd.edu/s/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...