registration.scholasticbookfairs.com Cross Site Scripting vulnerability OBB-2217119

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Command Execution Vulnerability in Scholastic Pepperdine's pc Client

Scholastic Premium is a deeply customized service-based app for Scholastic Premium students. A command execution vulnerability exists in the Scholastic Premium pc client, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Scholastic Online School Computer Client

Scholastic Online School PC Client is an online learning software for primary and secondary schools. A command execution vulnerability exists in the Scholastic Online School computer client, which can be exploited by attackers to execute malicious code...

resource-bank.scholastic.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-457764 Description| Value ---|--- Affected Website:| resource-bank.scholastic.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

link.scholastic.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-355462 Description| Value ---|--- Affected Website:| link.scholastic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

emea.scholastic.com XSS vulnerability

Vulnerable URL: http://emea.scholastic.com/en/emea-la/search/'"--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

scholastic.com XSS vulnerability

Open Bug Bounty ID: OBB-206248 Description| Value ---|--- Affected Website:| scholastic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

teacher.scholastic.com XSS vulnerability

Vulnerable URL: http://teacher.scholastic.com/products/classmags/subscribesale.asp?promocode=6153%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 23.06.2017 Latest check for patch:| 23.06.2017 15:47 GMT Vulnerability type:| XSS Vulnerability status:|...

scholastic.com XSS vulnerability

Open Bug Bounty ID: OBB-165064 Description| Value ---|--- Affected Website:| scholastic.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

teacher.scholastic.com XSS vulnerability

Vulnerable URL: http://teacher.scholastic.com/activities/writing/index.asp?topic=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3EIditarod Details: Description| Value ---|--- Patched:| Yes, at 19.06.2017 Latest check for patch:| 19.06.2017 07:02 GMT Vulnerability type:| XSS Vulnerability status:|...

teacher.scholastic.com XSS vulnerability

Vulnerable URL: http://teacher.scholastic.com/activities/writing/prepare.asp?topic=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3EResearch Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 20:22 GMT Vulnerability type:| XSS Vulnerability status...

scholastic.com XSS vulnerability

Vulnerable URL: http://www.scholastic.com/browse/article.jsp?id=3757695=true=Stevenkn=Tafraout=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E=%22%3E%3Ch1%3Eaa%3C/h1%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

scholastic.cl XSS vulnerability

Vulnerable URL: http://www.scholastic.cl/en/emea-la/search/asd%22%3E%3Csvg%20onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Unfixed XSS vulnerability at bookwizard.scholastic.com

Security researcher thejanky, has submitted on 02/10/2010 a cross-site-scripting XSS vulnerability affecting bookwizard.scholastic.com, which at the time of submission ranked 4727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It i...