dec-edu.com Open Redirect vulnerability

Vulnerable URL: http://dec-edu.com/out.php?url=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 06.10.2015 Latest check for patch:| 06.10.2015 06:36 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 796100 Google Pagerank| 5 VIP...

某OA系统存在6处MSSQL注射漏洞

简要描述： 6处GET型注射 详细说明： 总是看到有人分开刷；我就不一一提交，打包好了！案例其实很多的；前人有一个列出比较多的案例；例如： WooYun: 某OA系统两处SQL注射到GetShell ；主要影响ZF、Edu、事业单位等... 厂商： http://www.haitiansoft.com:8080/ 海天OA移动办公软件 - 领先的协同办公管理系统解决方案专家 六处SQL注入点：（与乌云现有公开记录无重复） /UserInfor/UserInfor.asp?UserName=sa /UserInfor/BuMenDetail.asp?OAID=1...

vufind.library.cmu.edu XSS vulnerability

Open Bug Bounty ID: OBB-63879 Description| Value ---|--- Affected Website:| vufind.library.cmu.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

mc3.edu XSS vulnerability

Open Bug Bounty ID: OBB-61139 Description| Value ---|--- Affected Website:| mc3.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

In a recent cyber attack on a Forum site, thousands of outdated legitimate WordPress blogs were abused to perform DDOS attacks using previously known vulnerabilities. After analyzing the Log file from the victim's server, we have noticed many Wordpress CMS based educational .EDU and Government .G...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

None...

UTA EDU University ENG SQL Injection

Title: ====== UTA EDU University ENG - SQL Injection Vulnerability Date: ===== 2013-08-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=256 VL-ID: ===== 256 Common Vulnerability Scoring System: ==================================== 8.4 Introduction: ============= The...

UTA EDU University ENG - SQL Injection Vulnerability

Document Title: =============== UTA EDU University ENG - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=256 Release Date: ============= 2013-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 256...

Educause Server Hit With Security Breach

A non-profit association for IT professionals in higher education announced Tuesday its server had been breached. Educause, which has 1,800 college and 300 corporate members, issued a warning that it had discovered a security breach sometime in February that may have compromised the hashed...

National Center EDU Research SQL Injection

Title: ====== National Center EDU Research - SQL Injection Vulnerability Date: ===== 2012-04-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=415 VL-ID: ===== 415 Introduction: ============= The United States Department of Education, also referred to as ED or the ED f...

WonderDesk Cross Site Scripting

Exploit Title: WonderDesk Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.wonderdesk.com/ Google Dorks: inurl:wonderdesk.cgi?do Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html...

Unfixed XSS vulnerability at www.biochem.emory.edu

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting www.biochem.emory.edu, which at the time of submission ranked 17116 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at www.sc4.edu

Security researcher Xartrick, has submitted on 10/10/2010 a cross-site-scripting XSS vulnerability affecting www.sc4.edu, which at the time of submission ranked 622132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Attackers Targeting .Edu Sites in SEO Poisoning Campaigns

Having mastered the art of poisoning search engine results for .com sites, attackers are now turning their attention to .edu sites, linking their keyword campaigns to educational institutions as a way of lending their malicious sites more credence in the eyes of Google. The goal of these attacks ...

Unfixed XSS vulnerability at uaops.ua.edu

Security researcher Mystick, has submitted on 05/07/2009 a cross-site-scripting XSS vulnerability affecting uaops.ua.edu, which at the time of submission ranked 22649 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently...

Unfixed XSS vulnerability at www.balamand.edu.lb

Security researcher NoPh0BiA, has submitted on 22/10/2007 a cross-site-scripting XSS vulnerability affecting www.balamand.edu.lb, which at the time of submission ranked 400222 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at events.internet2.edu

Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting events.internet2.edu, which at the time of submission ranked 111507 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is...

The use of third-party Internet access software real free Internet access-vulnerability warning-the black bar safety net

New Year's Day the night before, discovered this vulnerability. I was in Jiangsu Changzhou at the school sophomore students. Our school is Nanjing lianchuang company of broadband Internet assistant on the web. This is it, don't know what we black-how many friends, this method can achieve the real...