SQL Injection Vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is a SQL injection vulnerability in Yinda Hui Zhi Anshu Yi Intelligent Integrated Management...

Unauthorized Access Vulnerability in the New CCS Campus Card e-Services Platform

Through its self-built China College Card and other industry clouds, Xinzhongxin provides information management tools for managers of schools, enterprises, public security, banks, insurance and various other organizations. An unauthorized access vulnerability exists in Xinzhongxin's campus card...

PU Pocket Campus App has information leakage vulnerability

PU Pocket Campus APP is developed by Suzhou Tiangong Information Technology Co., Ltd. a real-name interactive Internet platform for college students. PU Pocket Campus APP has an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

PU Pocket Campus App Exploits Arbitrary Password Reset Vulnerability

PU Pocket Campus APP, developed by Suzhou Tiangong Information Technology Co., Ltd, is a real-name interactive Internet platform for college students, where students can participate in online activities to obtain "second class" credits and employment training support. There is an arbitrary passwo...

Logic Flaw Vulnerability in Lechi Cloud Digital Campus System

Lechi Cloud Digital Campus System is a public education cloud SAAS solution. A logic flaw vulnerability exists in the Lechi Cloud Digital Campus System. An attacker can exploit this vulnerability to obtain sensitive information...

Uber: API on campus-vtc.com allows access to ~100 Uber users full names, email addresses and telephone numbers.

There was an API endpoint on the Uber site campus-vtc.com that allows an attacker to view the full names, personal email addresses and phone numbers of 83 Uber France members. These were people who uploaded entries to a contest on campus-vtc.com. Endpoint leaked some PII for the 83 Uber France...

Weak Password Vulnerability in Campus Uniform Fee Collection System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. There is a weak password vulnerability in the Campus Unified Charging System, which can be exploited by an attacker to log into the system to obtain...

File Upload Vulnerability in Campus Flat Fee System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. A file upload vulnerability exists in the Campus Unified Charging System, which can be exploited by attackers to gain control of the web server...

Code injection

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

CVE-2019-10012

CVE-2019-10012 affects Jenzabar JICS (Internet Campus Solution) prior to version 9. An attacker can upload and execute arbitrary .aspx code by placing it in a ZIP archive and leveraging the MoxieManager (for .NET) plugin before 2.1.4 in the installation’s ICS\ICS.NET\ICSFileServer directory. The ...

CVE-2019-10011

CVE-2019-10011 affects Jenzabar JICS (Internet Campus Solution): ICS/StaticPages/AddTestUsers.aspx allows remote account creation with a password of 1234 prior to 2019-02-06. Connected sources (Red Hat, NVD, CVE lists) corroborate the same description. The documentation does not provide a patch v...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2019-29278)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Campus Community is one of the Campus Management PeopleSoft Enterprise C...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2493

The CVE-2019-2493 issue affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise CS Campus Community component (Frameworks subcomponent). Affected versions are 9.0 and 9.2. The vulnerability allows an unauthenticated attacker who has network access via HTTP to compromise the CS ...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Shanghai Haitian Information Campus Informatization Platform suffers from SQL Injection Vulnerability

Shanghai Haitian Information System Engineering Co., Ltd. is a company dedicated to business research, product development, application consulting, project implementation, customer service, and industry alliance of management application software in the field of education and school. A SQL...

campus-channel.com XSS vulnerability

Open Bug Bounty ID: OBB-691167 Description| Value ---|--- Affected Website:| campus-channel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

campus.toolwire.com XSS vulnerability

Open Bug Bounty ID: OBB-679762 Description| Value ---|--- Affected Website:| campus.toolwire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...