EUVD-2007-1328

Malware in sbrugna...

EUVD-2022-41566

Malicious code in bioql PyPI...

CVE-2022-39020

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

CVE-2022-39020

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

Cross site scripting

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

CVE-2022-39020

CVE-2022-39020 corresponds to multiple XSS vulnerabilities in Schoolbox, affecting version 21.0.2. The issues are described as stored and reflected XSS in features such as student assessment submission, file upload, news, ePortfolio, and calendar event creation. The root cause is XSS, but the pro...

CVE-2022-39020 Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

CVE-2022-39020 Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

PT-2022-24676 · Schoolbox Pty +1 · Schoolbox

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The application is affected by multiple instances of cross-site scripting XSS, including both stored and reflected XSS. Vulnerable features include student assessment submission, file...

Schoolbox 跨站脚本漏洞

Schoolbox is an online learning platform from Schoolbox Australia. A security vulnerability exists in Schoolbox version 21.0.2, which stems from its student assessment submission, file upload, news, ePortfolio, and calendar event creation features that allow an attacker to implement multiple...

Mahara 安全漏洞

Mahara is a free open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 21.04 through 21.04.6, 21.10 through 21.10.4, and 22.04.2, which stems from the fact that it is sometimes possible to download files via thumb.php without checking...

EPortfolio 1.0 Client Side Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22829/info ePortfolio is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to perform various attacks that...

Joomla Eportfolio Shell Upload

============================================= Joomla comeportfolio Upload Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

CVE-2007-1331

Multiple cross-site scripting XSS vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program. NOTE: some...

CVE-2007-1331

CVE-2007-1331 affects TKS Banking Solutions ePortfolio 1.0 Java with multiple cross-site scripting (XSS) vulnerabilities. The description references arbitrary web script/HTML injection via unspecified vectors, one potential vector being the q parameter to the search program, allowing remote attac...

CVE-2007-1332

CVE-2007-1332 describes multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java . Attackers can perform unspecified restricted actions in the context of affected accounts by bypassing the client-side protection scheme. The entry notes a high impact ...

CVE-2007-1332

Multiple cross-site request forgery CSRF vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme...

ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities scip AG Vulnerability ID 2893 12/22/2006 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893 I. INTRODUCTION ePortfolio is a e-banking application by TKS Banking Solutions. More...

EPortfolio 1.0 - Client-Side Input Validation

source: https://www.securityfocus.com/bid/22829/info ePortfolio is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to perform various attacks that are caused by input-validation...

EPortfolio 1.0 - Client-Side Input Validation

EPortfolio 1.0 - Client-Side Input Validation source: https://www.securityfocus.com/bid/22829/info ePortfolio is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to perform various...