CVE-2008-2968

CVE-2008-2968 is a SQL injection vulnerability in rating.php of Academic Web Tools (AWT YEKTA) prior to or including version 1.4.3.1 and 1.4.2.8, exploitable via the book_id parameter to allow remote execution of arbitrary SQL commands. The vulnerability is documented with a CVSS v2 base score of...

CVE-2008-2967: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to login.php and the 2 glbsid parameter to hta/htmlarea.js.php, and allow remote authenticated...

CVE-2008-2968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rating.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2008-2969: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the dfile parameter...

CVE-2008-2970: Improper Input Validation

Multiple session fixation vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to 1 index.php and 2 login.php in homepg/...

Open redirect

Open redirect vulnerability in rssgetfile.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter...

CVE-2008-2878

CVE-2008-2878 is an open redirect vulnerability in rss_getfile.php of Academic Web Tools (AWT YEKTA), affecting versions 1.4.3.1 and 1.4.2.8 and earlier. The flaw allows remote attackers to redirect users to arbitrary websites and facilitate phishing via a URL supplied in the file parameter. The ...

CVE-2008-2878: Undefined Security Weakness

Open redirect vulnerability in rssgetfile.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter...

Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1...

Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1. Description: ACADEMIC WEB TOOLS A...

Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Academic Web Tools CMS = 1.4.2.8 Multiple Vulnerabilities ========================================================== AmnPardaz Security Research Team Title: Academic Web Tools CMS...

academic-sqlxss.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1. Description: ACADEMIC WEB TOOLS A...

Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities

Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original...

CVE-2008-1883

Blackboard Academic Suite 7.x stores MD5 password hashes provided directly by clients, enabling remote attackers to access accounts by sending an arbitrary MD5 string instead of the client-side hashed value. The server accepts client-provided hashes without validating the JavaScript/MD5 step. Aff...

CVE-2008-1883: Improper Authentication

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via 1 the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or 2 the...

CVE-2008-1795

Multiple cross-site scripting XSS vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via 1 the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or 2 the...

CVE-2008-1795

Multiple cross-site scripting XSS vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via 1 the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or 2 the...

CVE-2008-1795

CVE-2008-1795 covers multiple XSS vulnerabilities in Blackboard Academic Suite (7.x and earlier; possibly some 8.0). The flaws allow remote attackers to inject arbitrary script/HTML via two inputs: (1) searchText in a Course action to webapps/blackboard/execute/viewCatalog, and (2) data__announce...

CVE-2008-1795: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via 1 the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or 2 the...