Pearson Vue VTS 2.3.1911 Installer - (VUEApplicationWrapper) Unquoted Service Path Vulnerability

Exploit Title: Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path Discovery by: Jok3r Vendor Homepage: https://home.pearsonvue.com/ Software Link: https://vss.pearsonvue.com/VSSFiles/Documents/ENUTCInstallGuide/DownloadVTSInstaller.htm Tested Version: 2.3.1911...

Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path

Exploit Title: Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path Discovery by: Jok3r Discovery Date: 2020-09-14 Vendor Homepage: https://home.pearsonvue.com/ Software Link: https://vss.pearsonvue.com/VSSFiles/Documents/ENUTCInstallGuide/DownloadVTSInstaller.htm...

pearson.abplearning.com Cross Site Scripting vulnerability OBB-1225937

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

qualifications.pearson.com Cross Site Scripting vulnerability OBB-1212600

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

home.pearsonvue.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1173108 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2014-1454

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

Design/Logic Flaw

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

CVE-2014-1454

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

CVE-2014-1454

Pearson eSIS Enterprise Student Information System is affected by CVE-2014-1454, a stored XSS in the message board caused by improper validation of user input. The vulnerability allows injection of HTML/script into the browser context of other users, potentially enabling session hijacking or phis...

pearson.co.jp Cross Site Scripting vulnerability

Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting pearson.co.jp website and its users. Following coordinated...

pearson.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1035780 Security Researcher tester19 Helped patch 12 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting pearson.com website and its...

pearsonferrier.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-696389 Description| Value ---|--- Affected Website:| pearsonferrier.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Input validation

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges...

CVE-2018-12989

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges...

CVE-2018-12989

The CVE-2018-12989 vulnerability affects Pearson VUE Certiport Console 8 and IQSystem 7 prior to 2018-06-26. The root cause is mishandling of child processes, which causes Internet Explorer or Microsoft Edge to be launched with Administrator privileges, enabling local privilege escalation. Public...

CVE-2018-12989

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges...

identity-internal.pearson.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-634068 Description| Value ---|--- Affected Website:| identity-internal.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

iam.pearson.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633822 Description| Value ---|--- Affected Website:| iam.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

support.assessment.pearson.com XSS vulnerability

Open Bug Bounty ID: OBB-605718 Description| Value ---|--- Affected Website:| support.assessment.pearson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pearsonvue.com XSS vulnerability

Vulnerable URL: http://www.pearsonvue.com/accommodations/clientreview.asp?clientName=Reading+Instruction+Competence+Assessment+RICA=JavaSCript:promptOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 01.06.2017 Latest check for patch:| 01.06.2017 07:08 GMT Vulnerability type:| XS...