Lucene search
+L

4250 matches found

Openbugbounty
Openbugbounty
added 2022/09/05 4:11 a.m.21 views

ourladyoftherosary-pri.glasgow.sch.uk Cross Site Scripting vulnerability OBB-2888929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/08/31 2:33 p.m.27 views

High-School Graduation Prank Hack

This is a fun story, detailing the hack a group of high school students perpetrated against an Illinois school district, hacking 500 screens across a bunch of schools. During the process, the group broke into the school’s IT systems; repurposed software used to monitor students’ computers;...

10CVSS9.5AI score0.01611EPSS
SaveExploits1
Wired Threat Level
Wired Threat Level
added 2022/08/22 11:0 a.m.23 views

Inside the World’s Biggest Hacker Rickroll

As a graduation prank, four high school students hijacked 500 screens across six school buildings to troll their classmates and teachers...

1.8AI score
SaveExploits0
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.6 views

WordPress Plugin The School Management – Education & Learning Management SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin The School Management - Education &...

9.8CVSS8.5AI score0.00681EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/16 8:15 a.m.42 views

CVE-2022-36344

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

9.8CVSS0.00752EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/16 8:15 a.m.25 views

Design/Logic Flaw

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

7.5CVSS9.4AI score0.00752EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/08/16 7:3 a.m.49 views

CVE-2022-36344

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

9.7AI score0.00752EPSS
SaveExploits0References2
Saint
Saint
added 2022/08/12 12:0 a.m.240 views

Weblizar School Management Pro plugin backdoor

Added: 08/12/2022 CVE: CVE-2022-1609 Background Weblizar School Management is a WordPress plugin for management of school operations. Problem The license checking code in School Management Pro contains a backdoor which allows remote attackers to execute arbitrary commands. Resolution Upgrade to t...

9.8CVSS9.8AI score0.64321EPSS
SaveExploits6
Saint
Saint
added 2022/08/12 12:0 a.m.230 views

Weblizar School Management Pro plugin backdoor

Added: 08/12/2022 CVE: CVE-2022-1609 Background Weblizar School Management is a WordPress plugin for management of school operations. Problem The license checking code in School Management Pro contains a backdoor which allows remote attackers to execute arbitrary commands. Resolution Upgrade to t...

9.8CVSS9.8AI score0.64321EPSS
SaveExploits6
Openbugbounty
Openbugbounty
added 2022/08/11 3:43 a.m.15 views

perthschoolofpurpose.com.au Cross Site Scripting vulnerability OBB-2835696

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/08/04 12:0 a.m.9 views

The vulnerability of the Add Photo and Import Staff functions in the school management web system School ERP Pro allows a perpetrator to execute arbitrary codes.

The vulnerability of the Add Photo and Import Staff functions in the school management web system School ERP Pro relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by loading a specially created malware file...

10CVSS8AI score0.01924EPSS
SaveExploits1References5Affected Software1
Openbugbounty
Openbugbounty
added 2022/08/03 9:16 a.m.15 views

championsschool.com Cross Site Scripting vulnerability OBB-2824600

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/07/30 11:18 a.m.10 views

spokanechristianschool.org Cross Site Scripting vulnerability OBB-2820699

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
NVD
NVD
added 2022/07/28 10:15 p.m.18 views

CVE-2022-34580

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

4.8CVSS0.00493EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/28 10:15 p.m.3 views

CVE-2022-34580

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

4.8CVSS5.8AI score0.00493EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/28 10:15 p.m.4 views

CVE-2022-34580

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

4.8CVSS5.7AI score0.00493EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/28 10:15 p.m.19 views

Cross site scripting

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

4.3CVSS5AI score0.00493EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/28 9:11 p.m.27 views

CVE-2022-34580

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

5.2AI score0.00493EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/28 9:11 p.m.74 views

CVE-2022-34580

CVE-2022-34580 affects Advanced School Management System v1.0. The issue is a cross-site scripting (XSS) vulnerability exploitable via the address parameter at ip/school/index.php. Documented CVSS: 4.8 (MEDIUM) with network attack vector, high privileges required and user interaction. APT/Exploit...

4.8CVSS5AI score0.00493EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/28 12:0 a.m.8 views

PT-2022-22219 · Unknown · Advanced School Management System

Name of the Vulnerable Software and Affected Versions: Advanced School Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the address parameter at the "ip/school/index.php" endpoint. Recommendations:...

4.8CVSS4.7AI score0.00493EPSS
SaveExploits1References3
Rows per page
Query Builder