EUVD-2024-41290

Malicious code in bioql PyPI...

CVE-2024-45058 Privilege escalation in i-Educar

i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. Prior to the 2.9 branch, an attacker with only minimal viewing privileges in the settings section is able to change their user type to Administrator or...

CVE-2024-27717

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27710

An issue in the authentication mechanism of Eskooly Free Online School management Software versions 3.0 and before allows a remote attacker to escalate privileges . The vulnerability is accessible over the network and impacts confidentiality, integrity, and availability. While the documents recom...

PT-2024-22008 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School Management Software versions 3.0 and earlier Description: The issue allows a remote attacker to escalate privileges via the Token Handling component. This is a Cross Site Request Forgery vulnerability...

CVE-2024-27717

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27715: Unverified Password Change

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism...

CVE-2024-27712: Undefined Security Weakness

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism...

CVE-2024-27715

Eskooly Free Online School management Software versions v.3.0 and earlier are vulnerable to a privilege escalation flaw. A remote attacker can exploit a vulnerability in the Password Change mechanism by sending a crafted request . The impact allows for unauthorized privilege elevation. As a tempo...

CVE-2024-27717: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

PT-2024-22005

Name of the Vulnerable Software and Affected Versions Eskooly Free Online School management Software versions 3.0 and earlier Description An issue in the software allows a remote attacker to escalate privileges via the HTTP Response Header Settings component. Recommendations For versions 3.0 and...

CVE-2024-27711

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings...

CVE-2024-27710: Improper Privilege Management

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism...

CVE-2024-27711: Improper Privilege Management

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings...

CVE-2024-27713: Protection Mechanism Failure

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

Open-School SQL Injection Vulnerability

Open-School is a Web-based school management software. The software provides online fee collection, attendance and online library features. A SQL injection vulnerability exists in Open-School version 2.3 Community Edition and version 3.0, which stems from a lack of validation of externally entere...