Authorization Bypass

Moodle is vulnerable to authorization bypass. The library does not consider if a forum is optional, allowing a malicious user to bypass forum-subscription requirements through the student role and unsubscribing from all forums...

Alio Applicant Portal 6.0 SQL Injection Vulnerability

Alio Applicant Portal versions 6.0 and below suffer from a remote SQL injection vulnerability. +---------------------------------------------------------+ | Vulnerable Software: Alio Applicant Portal | | Vendor: http://www.myalio.com/ | | Vulnerability Type: SQL Injection | | Date Released:...

Unauthorised Modification

moodle is vulnerable to unauthorised modifications. A malicious user can bypass an activity's read-only state by using the student role and modify the database...

Bypass Access Restrictions

Moodle is vulnerable to access restrictions being bypassed. Authenticated users can leverage the student role to bypass access restrictions and read the RSS feed for a forum. This is possible because mod/forum/rsslib.php does not correctly implement the requirement for posting before reading a Q...

AuroMeera Technometrix Pvt Cross-Site Scripting Vulnerability

eMLi is a comprehensive education management suite from AuroMeera Technometrix Pvt for educational institutions in India and globally. A cross-site scripting vulnerability in core-eMLi of AuroMeera Technometrix Pvt's eMLi allows an attacker to send malicious code as a browser-side script to...

CVE-2017-7621

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/studentportal/home.php. The affected versions are eMLi...

Quadz School Management System 3.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo:...

TI Online Examination System 2.0 SQL Injection

Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo: http://oesv2.textusintentio.com/ Version: 2.0 Tested on: Win7 x64...

Quadz School Management System 3.1 SQL Injection

Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo: http://mass.awardcorporation.com/ Version: 3.1 Tested on: Win7...

Examplo Online Exam System SQL Injection

Exploit Title: Examplo - Online Exam System - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://softpae.sk/ Software Buy: https://codecanyon.net/item/examplo-online-exam-system/16174658 Demo: http://munka.softpae.sk/examplo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

SOA School Management - 'view' SQL Injection

Exploit Title: Complete School Management Software with Web Portal - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://www.ynetinteractive.com/ Software Buy: http://www.ynetinteractive.com/soa/ Demo: http://www.ynetinteractive.com/soa/demo.php Version: N/A Tested on: Win7 x6...

SQL Injection Vulnerability in Graduate Student Management Information System of Nanjing Nansoft Technology Co.

Nanjing nansoft science and technology limited company postgraduate management information system using .net multilayer architecture development of b/s mode station building system. SQL injection vulnerability exists in the graduate student management information system of Nanjing Nansoft...

SQL Injection Vulnerability in Type Parameters of Digital Campus Management System of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. A SQL injection vulnerability exists in the Digital Campus Management System/Student/xsxk/MessageView.aspx page of Shanghai Pengda...

School Full CBT 0.1 - SQL Injection

School Full CBT 0.1 - SQL Injection Exploit Title.............. School Full CBT SQL Injection Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/node/9859 Software Link...

SQL Injection Vulnerability in the Student Management System wjgl_xx.asp Page of Shanxi Huaxing TechSoft Co.

Student Management System is a software application for the daily management of various student information. A SQL injection vulnerability exists in the Student Management System developed by Shanxi Huaxing TechSoft Co. Ltd, which can be exploited by attackers to obtain sensitive information from...

flsm.com XSS vulnerability

Vulnerable URL: http://www.flsm.com/studentlife/studentlogin.php?origurl=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

SQL injection vulnerability in the xh parameter of the student/BookIndex.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

SQL injection vulnerability in the xh parameter of the student/WorkAndStudy.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

SQL injection vulnerability in the XH parameter of the student/XJB1.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

ck12.org XSS vulnerability

Vulnerable URL: https://www.ck12.org/auth/signup/student?requestor='-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 21.03.2017 Latest check for patch:| 21.03.2017 22:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5833 VIP websit...