burundihrdcoalition.org Improper Access Control vulnerability OBB-2253229

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

January 17, 2018—KB4057142 (OS Build 14393.2034)

None None...

International Islamic University Chittagong: SQL injection in http://119.18.148.140/hrd/js/makeemployeeid.php

Hello, The mentioned page takes at least two GET parameters, namely q and departmentname. The two parameters are vulnerable to SQL injection as both are placed into SQL query strings without proper sanitization. It seems like the PHP script uses the affected parameters into two SQL queries, since...

hrd6.ccsd.net XSS vulnerability

Vulnerable URL: http://hrd6.ccsd.net/HRD/forms/SubApp/prgHrdSchoolList.php?theRegID=1/-///'/"//--...