people.brandeis.edu Cross Site Scripting vulnerability OBB-3854216

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

people.brandeis.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-660809 Description| Value ---|--- Affected Website:| people.brandeis.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

help.brandeis.edu XSS vulnerability

Open Bug Bounty ID: OBB-629084 Description| Value ---|--- Affected Website:| help.brandeis.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aeaea.cs-i.brandeis.edu XSS vulnerability

Vulnerable URL: http://aeaea.cs-i.brandeis.edu:8080/spellbee/servlet/org.spellbee.login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

blogs.brandeis.edu XSS vulnerability

Open Bug Bounty ID: OBB-152044 Description| Value ---|--- Affected Website:| blogs.brandeis.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Directory Traversal in ArsDigita Community System

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...