591 matches found
onlinetradingcampus.com Cross Site Scripting vulnerability OBB-2672341
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-33097
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campusjob...
74cms SQL注入漏洞
74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of externally entered SQL statements in the keyword parameter of /home/campus/campusjob. An attacker...
The vulnerability of the Integration and Interfaces components of the Oracle PeopleSoft Enterprise CS Campus Community application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Integration and Interfaces components of the Oracle PeopleSoft Enterprise CS Campus Community application exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
campus-am-park.de Cross Site Scripting vulnerability OBB-2653683
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Elasticsearch Database Mess Up Exposed Login, PII Data of 30,000 Students
By Deeba Ahmed The misconfigured Elasticsearch database apparently belonged to the US-based software solution provider Transact Campus. SafetyDetectives’ cybersecurity research team… This is a post from HackRead.com Read the original post: Elasticsearch Database Mess Up Exposed Login, PII Data of...
Axios Italia Axios RE 安全漏洞
Axios Italia Axios RE is a suite of electronic enrollment software for campus administration. Axios Italia Axios RE 1.7.0/7.0.0 contains a security vulnerability that originates from a problem with the file REDefault.aspx in the component connection handler. An attacker can exploit the...
WordPress Campus Directory plugin <= 1.7.4 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Campus Directory plugin versions = 1.7.4. Solution Update the WordPress Campus Directory plugin to the latest available version at least 1.7.5...
CVE-2022-21157
Improper access control in the IntelR Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access...
CVE-2022-21157
Improper access control in the IntelR Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access...
CVE-2022-21157
Improper access control in the IntelR Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access...
CVE-2022-21157
CVE-2022-21157 concerns the Intel® Smart Campus Android application prior to version 6.1, where improper access control could allow an authenticated user to disclose information via local access. The issue arises from insufficient access restrictions within the app, enabling possibly partial info...
CVE-2022-21157
Improper access control in the IntelR Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access...
Intel Smart Campus Android App 安全漏洞
Intel Smart Campus Android App is a Smart Campus application from IntelR Corporation. A security vulnerability exists in the IntelR Smart Campus Android application that stems from incorrect access controls in the application that could allow authenticated users to potentially enable information...
PT-2022-14889 · Intel · Intel Smart Campus Android Application
Name of the Vulnerable Software and Affected Versions: IntelR Smart Campus Android application versions prior to 6.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access. Recommendations:...
Intel® Smart Campus Android App Advisory
Summary: A potential security vulnerability in the Intel® Smart Campus Android application may allow information disclosure. Intel is releasing application updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21157 Description: Improper access control in the...
Weak Password Vulnerability in Golden Dragon Card Water Control Management System
Harbin Xinzhongxin Electronics Co., Ltd. is a leading provider of campus card system solutions in China. A weak password vulnerability exists in the Golden Dragon Card Water Control Management System, which can be exploited by attackers to obtain sensitive information...
CVE-2021-35606
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Notification Framework. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment...
CVE-2021-35606
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Notification Framework. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment...
CVE-2021-35606
CVE-2021-35606 affects Oracle PeopleSoft Enterprise CS Campus Community (Notification Framework); affected versions: 9.0 and 9.2. Root cause is not explicitly detailed in the provided sources, but the vulnerability enables a low-privileged attacker with access to the physical network/communicatio...