591 matches found
LZXSZXYXT乐知行数字校园系统 /oa/calendar/exportExcel.do等5处 SQL注入漏洞
No description provided by source...
CVE-2016-2214
Cross-site scripting XSS vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2016-2214
Cross-site scripting XSS vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2016-2214
Huawei Agile Controller-Campus contains a cross-site scripting (XSS) vulnerability in a portal authentication page. Affected software is before V100R001C00SPC319. Remote attackers could inject arbitrary web script or HTML via unknown vectors, potentially impacting user sessions. Huawei HWPSIRT ad...
Security Advisory - XSS Vulnerability in Huawei Agile Controller-Campus
A reflected cross-site scripting XSS vulnerability exists in some portal authentication page of the Agile Controller-Campus. When an attacker sends a malicious link to the system, the user is online and clicks on the link, XSS occurs. Therefore, the attacker may obtain the administrator privilege...
campusdining.princeton.edu XSS vulnerability
Vulnerable URL: https://campusdining.princeton.edu/dining/Foodpro/head.asp?sName=Princeton+University+Campus+Dining=16=Witherspoon%27s=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...
LZXSZXYXT乐知行数字校园系统在showInfoEdit.do的参数Type存在SQL注入漏洞
No description provided by source...
SQL Injection Vulnerability in SFS Academic Affairs Management System Designed by Taiwan Campus Free Software
SFS is a collaborative system built by multiple people who share open source code with each other. A SQL injection vulnerability exists in the Taiwan Campus Free Software Design SFS Academic Affairs Management System, which can be exploited by attackers to obtain sensitive information from the...
鼎创信息化校园 nKeyword 参数 SQL 注入漏洞
No description provided by source...
Harbin Xinzhongxin Campus Card System Arbitrary File Upload Vulnerability
Xinzhongxin Group is a high-tech enterprise integrating independent property right development, intensive production, networked sales, professional service and system integration construction. An arbitrary file upload vulnerability exists in the Harbin Xinzhongxin Campus One Card System, which...
EduSoho在线网校系统存储型XSS
简要描述: 学习,就得慢慢来。 详细说明: 就拿官方的在线Demo网站来做演示. 漏洞证明: 首先,注册账号。 注册以后,可以在网站上任意找到一个 学习小组 路径: http://.../group 热门小组啊,人好多的有木有? 点击加入该小组, 然后就可以发帖了。哦也! 发帖内文中,居然可以看源码。好开心。。。 上xss代码。 一般的 神马的都被撸了。 想办法吧! 创建节点,然后写js内容吧...
campus-montreal.ca XSS vulnerability
Vulnerable URL: http://campus-montreal.ca/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 511009...
金龙卡金融化一卡通校园卡查询系统任意文件上传漏洞
No description provided by source...
Chamilo LMS 1.9.10 /main/calendar/agenda_list.php 跨站脚本漏洞
I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain control over valid user accounts in LMS, perform...
乐知行数字校园系统本地包含漏洞
No description provided by source...
There are loopholes in the design of the password recovery function of the Shunzhang campus informationization platform.
Campus informatization platform is a set of campus education comprehensive application platform developed by Shunzhang Technology with the actual application needs of primary and secondary schools and fully integrating network resources. There is a vulnerability in the design of the password...
SQL Injection Vulnerability in typeId Parameter of Shunzhang Campus Informatization Platform
Campus informatization platform is a set of campus education comprehensive application platform developed by Shunzhang Technology with the actual application needs of primary and secondary schools and fully integrating network resources. There is a SQL injection vulnerability in the typeId...
Digital Campus System Arbitrary File Upload Vulnerability at Shanghai Dingchuang Information Technology Co.
Ltd. is based on China's education informatization business, is committed to the development of research and development of convenient and easy to use campus management software. The vulnerability in the upload of arbitrary files in the Digital Campus System of Shanghai Dingtron Information...
Huawei Campus Series Switches Remote Buffer Overflow DoS (HWPSIRT-2015-02014)
The remote Huawei switch is affected by a denial of service vulnerability due to improper validation of user-supplied input to the service processing function. A remote attacker, using a specially crafted username, can cause an array access violation, resulting in a restart of the device...