Online Class and Exam Scheduling System SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System 1.0 suffers from a SQL injection vulnerability that originates from an unknown function in the file /pages/facultysched.php being affected. The operation parameter facult...

CVE-2019-20008

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

CVE-2019-20008

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

PT-2019-16042

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

PT-2019-20131

Name of the Vulnerable Software and Affected Versions Archery versions prior to 1.3 Description The issue allows for stored XSS on the vulnerability-scan scheduling page when an XSS payload is inserted into a project name. This can occur either by creating a new project or editing an existing one...

CVE-2019-20008: Improper Neutralization of Input During Web Page Generation

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...