CVE-2023-35859

A Reflected Cross-Site Scripting XSS vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters...

CVE-2023-38411

Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21157

Improper access control in the IntelR Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access...

CVE-2022-4280

A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown functionality of the file /services/Card/findUser. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has be...

CVE-2022-46645

Uncontrolled resource consumption in the IntelR Smart Campus Android application before version 9.9 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-40766

Modern Campus Omni CMS formerly OU Campus 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - ,...

CVE-2022-3789

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument postid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2020-21883

Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...

java_server 安全漏洞

javaserver is a campus e-commerce project management platform based on SpringMVC+spring+Mybatis by xiaowei1118 individual developer. A security vulnerability exists in javaserver, which stems from a path traversal in the file upload function...

zeiss-campus.magnet.fsu.edu Cross Site Scripting vulnerability OBB-4035504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Campus Explorer Campus Explorer Widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through 1.4...

CVE-2024-49660 WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

CVE-2024-49660

CVE-2024-49660 concerns the Campus Explorer Widget (WordPress) with versions 1.4 and earlier. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Public sources in the connected docs confirm the affected software as Campu...

CVE-2024-49660 WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

WordPress plugin Campus Explorer Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-33612 · Unknown · Campus Explorer Widget

Name of the Vulnerable Software and Affected Versions: Campus Explorer Widget versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in the Campus Explorer...

Announcing the BlueHat 2024 Sessions

34 sessions from 54 presenters representing 20 organizations! We are thrilled to reveal the lineup of speakers and presentations for the 23rd BlueHat Security Conference, in Redmond WA from Oct 29-30. This year's conference continues the BlueHat ethos and Secure Future Initiative mission of...

WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Campus Explorer Widget versions = 1.4...