CVE-2024-27717

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27712

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism...

CVE-2024-27715

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism...

CVE-2024-27717

Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27710

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism...

CVE-2024-27710

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism...

PT-2024-22002 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School management Software versions 3.0 and earlier Description: An issue in the authentication mechanism allows a remote attacker to escalate privileges. Recommendations: For versions 3.0 and earlier, update to a version...

CVE-2024-27711

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings...

CVE-2024-27715

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism...

CVE-2024-27712

CVE-2024-27712 affects Eskooly Free Online School management Software version 3.0 and earlier. The vulnerability exists in the User Account Management component of the authentication mechanism, enabling a remote attacker to escalate privileges. CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9...

eSkooly Security Vulnerabilities

eSkooly is a free online school management software from eSkooly, Inc. A security vulnerability exists in eSkooly 3.0 and prior versions that stems from a cross-site request forgery vulnerability that allows remote attackers to elevate privileges via the token handling component...

PT-2024-22008 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School Management Software versions 3.0 and earlier Description: The issue allows a remote attacker to escalate privileges via the Token Handling component. This is a Cross Site Request Forgery vulnerability...

CVE-2024-27711

Eskooly Free Online School management Software, versions 3.0 and earlier, has a privilege-escalation issue that can be triggered remotely via the sign-up process in the account settings. The connected sources consistently describe this as a vulnerability allowing escalation of privileges, but do ...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27715

Eskooly Free Online School management Software (v3.0 and earlier) contains a vulnerability in the Password Change mechanism that allows a remote attacker to escalate privileges via a crafted request. Affected products are documented across multiple sources (CVE-2024-27715). The Red Hat and NVD en...

CVE-2024-27710

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism...

CVE-2024-27713

An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...

CVE-2024-27713

CVE-2024-27713 affects Eskooly Free Online School Management Software v.3.0 and earlier. The issue, described as a privilege escalation via the HTTP Response Header Settings component, originates from the affected product’s handling of response headers. No explicit exploit details, affected versi...

CVE-2024-27710

Eskooly Free Online School management Software v3.0 and earlier is affected by a privilege escalation via the authentication mechanism. Root cause is in the authentication flow allowing remote attackers to escalate privileges. Exploitation status/components are not detailed in the provided docume...