krematorium.ch XSS vulnerability

Vulnerable URL: http://www.krematorium.ch/index.asp?page=adresse-bgf-krematorium-bern" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

investor.bokf.com Open Redirect vulnerability

Vulnerable URL: http://investor.bokf.com/PDFPageView.aspx?iid=100003=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 04:32 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

jhssf.se XSS vulnerability

Vulnerable URL: http://jhssf.se/"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check jhssf.se SSL...

whylinuxisbetter.net XSS vulnerability

Vulnerable URL: http://www.whylinuxisbetter.net/items/security/index.php?lang=%22%27/%3E%3E%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 16:43 GMT Vulnerability type:| XSS Vulnerability status...

jcrew.com XSS vulnerability

Vulnerable URL: https://www.jcrew.com/nl/womenscategory/shoes/espadrilles/PRDO"VRC5447/C5447.jsp Details: Description| Value ---|--- Patched:| Yes, at 07.11.2016 Latest check for patch:| 07.11.2016 04:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1611 Googl...

justcuttin.com.au XSS vulnerability

Vulnerable URL: http://www.justcuttin.com.au/search.php?k=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2015 Latest check for patch:| 27.07.2015 21:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Moodle 2.7.x < 2.7.3 Information Disclosure

Binary data 8718.prm...

CVE-2014-7831

lib/classes/gradesexternal.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the getgrades web service...

Code injection

lib/classes/gradesexternal.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the getgrades web service...

CVE-2014-7831

Moodle 2.7.x before 2.7.3 exposes hidden grades via lib/classes/grades_external.php because it does not enforce moodle/grade:viewhidden before displaying grades. This affects remote authenticated users (e.g., students) who can access hidden grades through the get_grades web service. The vulnerabi...

Online Grades & Attendance 3.2.6 - Multiple SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

Online Grades & Attendance 3.2.6 - Multiple Local File Inclusion Vulns

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

Online Grades & Attendance 3.2.6 - Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

18-Year-Old Student Arrested for Hacking School Computers to Change Grades

An 18-year old Miami University student is facing charges for allegedly breaching the school's computer system to change grades for himself and four other students. Jose Bautista appeared before a judge Friday after he was arrested Thursday by the Miami School Board Police after the principal of...

UBUNTU-CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The CVE-2013-2080 entry concerns Moodle’s core_grade component where hidden grades are not properly accounted for. The vulnerability affects Moodle versions: 2.2.10 and 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.4. A remote authenticated user (via the student role) can read the Gradebook Overvi...

FBI To Probe California University Hack That Changed Student's Grades

More than 60 current and former students at Santa Clara University had their academic records hacked into and grades changed – for the better, according to a letter posted to the school’s site on Monday by university president Michael Engh. The note claims that there was unauthorized access to th...

Online Grades Project Team 3.2.5 Cross Site Scripting

Online Grades 3.2.5 Multiple XSS Vulnerabilites Vendor: Online Grades Project Team Product web page: http://www.onlinegrades.org Affected version: 3.2.5 Summary: Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic...

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48875/info Online Grades is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...