CVE-2023-38827

Summary: CVE-2023-38827 is a cross-site scripting vulnerability in Follet School Solutions Destiny (v.20_0_1_AU4 and later) that enables a remote attacker to run arbitrary code via the API endpoint presentonesearchresultsform.do . The connected documents confirm the affected product/version range...

CVE-2023-38827

Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...

CVE-2023-7059

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...

Cross site scripting

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...

CVE-2023-7059 SourceCodester School Visitor Log e-Book log-book.php cross site scripting

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...

CVE-2023-7059

The CVE-2023-7059 entry concerns SourceCodester School Visitor Log e-Book 1.0. The vulnerability is a cross-site scripting flaw in the log-book.php file triggered by manipulating the Full Name parameter. The issue is exploitable remotely, with public disclosure reported. Connected documents confi...

CVE-2023-7059 SourceCodester School Visitor Log e-Book log-book.php cross site scripting

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...

School Visitor Log e-Book Cross-Site Scripting Vulnerability

School Visitor Log e-Book is a School Visitor Log e-Book by Remy Andrade Personal Developer. School Visitor Log e-Book suffers from a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability in log-book.php...

PT-2023-31442 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /management/class component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

PT-2023-31440 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For School Fees Management Syst...

PT-2023-31441 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: The issue allows attackers to escalate privileges and perform administrative actions, including adding and deleting user accounts, due to broken access control in the...

PT-2023-31446 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /management/term component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

PT-2023-31445 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /admin/parent component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

PT-2023-31443 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /management/settings component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

sallysridingschool.com Improper Access Control vulnerability OBB-3809546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

scienceinschool.org Cross Site Scripting vulnerability OBB-3807801

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vijayainternationalschool.com Cross Site Scripting vulnerability OBB-3807532

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Inside America's School Internet Censorship Machine

A WIRED investigation into internet censorship in US schools found widespread use of filters to censor health, identity, and other crucial information. Students say it makes the web entirely unusable...

cambridgeschoolranchi.com Improper Access Control vulnerability OBB-3794917

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vijayainternationalschool.com Cross Site Scripting vulnerability OBB-3790650

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...