Online Grades Project Team 3.2.5 Cross Site Scripting

Online Grades 3.2.5 Multiple XSS Vulnerabilites Vendor: Online Grades Project Team Product web page: http://www.onlinegrades.org Affected version: 3.2.5 Summary: Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic...

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48875/info Online Grades is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48875/info Online Grades is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Online Grades 3.2.5 Multiple XSS Vulnerabilities

Summary Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic web site. Description Online Grades suffers from multiple cross-site scripting vulns. The issue is triggered when input passed via multiple parameters to...

SchoolMation 2.3 - SQL Injection Cross-Site Scripting

SchoolMation 2.3 - SQL Injection Cross-Site Scripting ==================================================== SchoolMation Version 2.3 SQLi and XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /...

SchoolMation 2.3 - SQL Injection / Cross-Site Scripting

==================================================== SchoolMation Version 2.3 SQLi and XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

SchoolMation Version 2.3 SQLi and XSS Vulnerability

Exploit for php platform in category web applications =================================================== SchoolMation Version 2.3 SQLi and XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Sql injection

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2598

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2598

CVE-2009-2598 affects Online Grades & Attendance 3.2.6 and earlier. The vulnerability stems from multiple SQL injection flaws: (1) via the key parameter in a resetpass action to index.php (remote unauthenticated access) and (2) via the ADD parameter in a mailto action to parents/parents.php (remo...

CVE-2009-2598: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

Directory traversal

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2037

Online Grades & Attendance v3.2.5 and earlier (potentially 3.2.6) are affected by multiple local file include/directory traversal vulnerabilities. The issue stems from insufficient input sanitization in two parameters: GLOBALS[SKIN] in index.php and skin in admin/admin.php, enabling remote attack...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2037: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

Online Grades And Attendance 3.2.6 Local File Inclusion

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://www.onlinegrades.org/ | |--DOWNLOAD: http://www.onlinegrades.org/ | |-...

Online Grades And Attendance 3.2.6 SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://www.onlinegrades.org/ | |--DOWNLOAD: http://www.onlinegrades.org/ | |--DE...

Online Grades And Attendance 3.2.6 SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ Parent Register name Credentials Changer SQLi EXPLOIT | |--------------------------------------------------------------------------------------------| | | Online...

Online Grades And Attendance 3.2.6 Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ 'cc' Blind SQLi EXPLOIT | |--------------------------------------------------------------------------------------------| | | Online Grades & Attendance v-3.2.6 | |...