Sphero Edu - Coding for Sphero Robots - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sphero Edu - Coding for Sphero Robots published at the 'play' market has multiple vulnerabilities...

edu.27.ru XSS vulnerability

Vulnerable URL: http://edu.27.ru/cgi-bin/BigChineseFireWall.pl?siteurl=PHN2ZyBvbmxvYWQ9InByb21wdCgnb3BlbmJ1Z2JvdW50eScpIjs+=999=localhost Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:18 GMT Vulnerability type:| XSS Vulnerability status:|...

catalog.sc4.edu XSS vulnerability

Vulnerable URL: http://catalog.sc4.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

edu.1125.ir XSS vulnerability

Vulnerable URL: http://edu.1125.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check edu.1125.ir SSL connection:| Grade: B- Coordinated...

Lindon-EDU V2 数字校园平台 /code/teach/class/classcourse.aspx 参数SubjectID SQL注入漏洞

No description provided by source...

careers.strathmore.edu XSS vulnerability

Vulnerable URL: https://careers.strathmore.edu/sys/login.php?msg=OPENBUGBOUNTY%3Cscript%3Ealert%28/OPENBUGBOUNTY/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

edu-con.de Open Redirect vulnerability

Vulnerable URL: http://www.edu-con.de/linkzu/?seite=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 9725021 Google...

transportal.cee.wisc.edu XSS vulnerability

Vulnerable URL: https://transportal.cee.wisc.edu/LOGIN?redir=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

edu-online.eu XSS vulnerability

Vulnerable URL: http://www.edu-online.eu/hu/educatioreszletes.php?id="61 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

edu-tver.ru XSS vulnerability

Vulnerable URL: http://www.edu-tver.ru/search/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1269783 Google Pagerank| 4 VIP website status:| No Check...

math.rutgers.edu XSS vulnerability

Vulnerable URL: http://www.math.rutgers.edu/grad/gradcourses/descriptions.php?term=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 01.03.2016 Latest check for patch:| 01.03.2016 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

beck.library.emory.edu XSS vulnerability

Vulnerable URL: http://beck.library.emory.edu/southernchanges/search.php?keyword=%22%3E%3Csvg%2Fonload%3Dprompt%28%2Fxssposed%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:46 GMT Vulnerability type:| XSS Vulnerability status:|...

gilb318-prn1.science.oregonstate.edu XSS vulnerability

Vulnerable URL: http://gilb318-prn1.science.oregonstate.edu/pbio/uncfgdev.html?MACADDRESS=000000000000=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

dec-edu.com Open Redirect vulnerability

Vulnerable URL: http://dec-edu.com/out.php?url=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 06.10.2015 Latest check for patch:| 06.10.2015 06:36 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 796100 Google Pagerank| 5 VIP...

某OA系统存在6处MSSQL注射漏洞

简要描述： 6处GET型注射 详细说明： 总是看到有人分开刷；我就不一一提交，打包好了！案例其实很多的；前人有一个列出比较多的案例；例如： WooYun: 某OA系统两处SQL注射到GetShell ；主要影响ZF、Edu、事业单位等... 厂商： http://www.haitiansoft.com:8080/ 海天OA移动办公软件 - 领先的协同办公管理系统解决方案专家 六处SQL注入点：（与乌云现有公开记录无重复） /UserInfor/UserInfor.asp?UserName=sa /UserInfor/BuMenDetail.asp?OAID=1...

vufind.library.cmu.edu XSS vulnerability

Open Bug Bounty ID: OBB-63879 Description| Value ---|--- Affected Website:| vufind.library.cmu.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

mc3.edu XSS vulnerability

Open Bug Bounty ID: OBB-61139 Description| Value ---|--- Affected Website:| mc3.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

In a recent cyber attack on a Forum site, thousands of outdated legitimate WordPress blogs were abused to perform DDOS attacks using previously known vulnerabilities. After analyzing the Log file from the victim's server, we have noticed many Wordpress CMS based educational .EDU and Government .G...

DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs

None...

UTA EDU University ENG SQL Injection

Title: ====== UTA EDU University ENG - SQL Injection Vulnerability Date: ===== 2013-08-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=256 VL-ID: ===== 256 Common Vulnerability Scoring System: ==================================== 8.4 Introduction: ============= The...