CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

PT-2024-22005

Name of the Vulnerable Software and Affected Versions Eskooly Free Online School management Software versions 3.0 and earlier Description An issue in the software allows a remote attacker to escalate privileges via the HTTP Response Header Settings component. Recommendations For versions 3.0 and...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27713: Protection Mechanism Failure

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

IRCCloud: Missing X-Content-Type-Options

https://www.irccloud.com/?/addNetwork doesn't have a header settings for X-Content-Type Options which means it is vulnerable to MIME sniffing. The only defined value, "nosniff", prevents Internet Explorer and Google Chrome from MIME-sniffing a response away from the declared content-type. This al...