Code injection

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

CVE-2019-10012

CVE-2019-10012 affects Jenzabar JICS (Internet Campus Solution) prior to version 9. An attacker can upload and execute arbitrary .aspx code by placing it in a ZIP archive and leveraging the MoxieManager (for .NET) plugin before 2.1.4 in the installation’s ICS\ICS.NET\ICSFileServer directory. The ...

CVE-2019-10011

CVE-2019-10011 affects Jenzabar JICS (Internet Campus Solution): ICS/StaticPages/AddTestUsers.aspx allows remote account creation with a password of 1234 prior to 2019-02-06. Connected sources (Red Hat, NVD, CVE lists) corroborate the same description. The documentation does not provide a patch v...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2019-29278)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Campus Community is one of the Campus Management PeopleSoft Enterprise C...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2493

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2493

The CVE-2019-2493 issue affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise CS Campus Community component (Frameworks subcomponent). Affected versions are 9.0 and 9.2. The vulnerability allows an unauthenticated attacker who has network access via HTTP to compromise the CS ...

Shanghai Haitian Information Campus Informatization Platform suffers from SQL Injection Vulnerability

Shanghai Haitian Information System Engineering Co., Ltd. is a company dedicated to business research, product development, application consulting, project implementation, customer service, and industry alliance of management application software in the field of education and school. A SQL...

campus-channel.com XSS vulnerability

Open Bug Bounty ID: OBB-691167 Description| Value ---|--- Affected Website:| campus-channel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

campus.toolwire.com XSS vulnerability

Open Bug Bounty ID: OBB-679762 Description| Value ---|--- Affected Website:| campus.toolwire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

campus-abroad.com XSS vulnerability

Open Bug Bounty ID: OBB-678596 Description| Value ---|--- Affected Website:| campus-abroad.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Firewalls and the Need for Speed

I was looking for resources on campus network design and found these slides pdf from a 2011 Network Startup Resource Center presentation. These two caught my attention: This bothered me, so I Tweeted about it. This started some discussion, and prompted me to see what NSRC suggests for architectur...

Arbitrary User Password Recovery Vulnerability in Smart Campus Platforms

Smart Campus Platform is a set of smart campus system developed by Guangdong ZhiNai Internet of Things Technology Co. The system involves a number of functional modules such as teaching scheduling, class transfer, class time statistics, teacher leave, student big data management platform,...

ntu.edu.sg XSS vulnerability

Open Bug Bounty ID: OBB-630282 Description| Value ---|--- Affected Website:| ntu.edu.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

campus-couto3-habinedita-4901.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629241 Description| Value ---|--- Affected Website:| campus-couto3-habinedita-4901.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

collegecampusconnection.com XSS vulnerability

Open Bug Bounty ID: OBB-627983 Description| Value ---|--- Affected Website:| collegecampusconnection.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

campus-service.com XSS vulnerability

Open Bug Bounty ID: OBB-596295 Description| Value ---|--- Affected Website:| campus-service.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Typo3 Powermail Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

campusmagazine.wlu.ca XSS vulnerability

Open Bug Bounty ID: OBB-551239 Description| Value ---|--- Affected Website:| campusmagazine.wlu.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...