22 matches found
WS-2021-0431
In Teammates feedback management tool, versions V7.14.0 through V7.16.0 are vulnerable to improper access control, as viewing and searching the students actions audit log was not limited for course owners only. Anyone with Instructor privileges could access the logs...
WS-2017-3787
In “TEAMMATES/teammates”, versions v5.41 to v5.103.01 are vulnerable against XSS as a result of insufficient sanitation in admin email content...
WS-2017-3786
In TEAMMATES/teammates, versions V5.49 to V5.100 are vulnerable to XSS as a result of displaying non sanitized admin email subject in the admin email log...
WS-2017-3788
In TEAMMATES feedback management tool, versions V4.98 through V5.94 are vulnerable to Cross Site Scripting XSS, due to user input not sanitized in the admin home page...
WS-2017-3789
In “TEAMMATES/teammates”, versions prior to v5.93 mishandles target=blank in A elements, which makes it easier for remote attackers to conduct redirection attacks...
WS-2016-7126
In “TEAMMATES/teammates”, versions v5.24 to v5.73 are vulnerable against XSS when converting a CSV into an HTML table...
WS-2016-7125
In “TEAMMATES/teammates”, versions V4.98 to V5.70 are vulnerable against XSS as a result of displaying unsanitized student information...
WS-2016-7124
In “TEAMMATES/teammates”, versions V4.98 to V5.69 are vulnerable to XSS as a result of displaying non sanitized students' info in admin activity log...
WS-2015-0076
In “TEAMMATES/teammates”, versions V5.0.1 to V5.46 are vulnerable to reflected Cross-Site Scripting XSS when student profile validation results are echoed...
WS-2015-0075
In “TEAMMATES/teammates”, versions v4.98 to v5.46 are vulnerable against XSS as a result of unsanitized input on error messages...
WS-2015-0074
In “TEAMMATES/teammates”, versions V4.98 to V5.45 are vulnerable against XSS as a result of displaying unsanitized institute information...
WS-2015-0073
In TEAMMATES/teammates, versions V4.98 to V5.41 the student feedback submission was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript...
WS-2014-0054
In TEAMMATES/teammates, versions V5.04 to V5.28 are vulnerable against XSS as a result of displaying unsanitized values from the user...
WS-2014-0061
In TEAMMATES versions v5.04 to v5.28 are vulnerable to stored Cross-Site Scripting...
WS-2014-0060
In “TEAMMATES/teammates”, versions prior to v5.07.01 are vulnerable to stored Cross-Site Scripting XSS...
WS-2014-0062
In TEAMMATES versions v4.98 to v5.00 are vulnerable to Reflected Cross-Site Scripting...
WS-2014-0057
In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized feedbackSessionName, courseId, creatorEmail in FeedbackSessionsDb...
WS-2014-0056
In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized googleId, name, email, institute in AccountsDb.java...