Lucene search
K

87 matches found

CERT
CERT
added 2014/04/01 12:0 a.m.22 views

Pearson eSIS Enterprise Student Information System XSS vulnerability

Overview Pearson eSIS Enterprise Student Information System contains a XSS vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'Pearson eSIS Enterprise Student Information System contains a reflected cross-site scripting vulnerabilit...

4.3CVSS6AI score0.01012EPSS
Exploits1References1
Drupal
Drupal
added 2011/03/30 12:0 a.m.10 views

SA-CONTRIB-2011-015 - Translation Management - Multiple Vulnerabilities

This Translation Management module helps to manage the process of translating content on your site. The module has several vulnerabilities. It doesn't sufficiently escape user text when printed to the browser nor when used in database queries resulting in Cross Site Scripting XSS and SQL Injectio...

7.7AI score
Exploits0References10
NVD
NVD
added 2007/02/21 5:28 p.m.20 views

CVE-2007-1044

Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2...

5CVSS6.7AI score0.08536EPSS
Exploits1References6
Prion
Prion
added 2007/02/21 5:28 p.m.15 views

Design/Logic Flaw

Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2...

5CVSS7.2AI score0.08536EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2007/02/21 5:0 p.m.27 views

CVE-2007-1044

Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2...

6.7AI score0.08536EPSS
Exploits1References6
CVE
CVE
added 2007/02/21 5:0 p.m.53 views

CVE-2007-1044

The CVE-2007-1044 issue affects Pearson Education PowerSchool 4.3.6, where remote attackers could enumerate contents of the admin folder by requesting a URI composed of the admin/ directory and a .js filename. The underlying impact is partial confidentiality loss. A fix is noted as addressed by P...

5CVSS6.7AI score0.08536EPSS
Exploits1References6Affected Software1
0day.today
0day.today
added 2005/04/12 12:0 a.m.27 views

MS Jet Database (msjet40.dll) Reverse Shell Exploit

Exploit for unknown platform in category local exploits =================================================== MS Jet Database msjet40.dll Reverse Shell Exploit =================================================== See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll...

6.8AI score
Exploits0
Rows per page
Query Builder