4250 matches found
CVE-2020-10505
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password...
CVE-2020-10506
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files...
Sql injection
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password...
Path traversal
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files...
CVE-2020-10507
CVE-2020-10507 concerns the ALLE INFORMATION CO., LTD. School Manage System (before 2020). The issue is an Unrestricted file upload vulnerability that can lead to remote code execution on the hosting machine. Root cause: misconfiguration of the file upload filter in the system (as noted in CNVD-2...
CVE-2020-10505 ALLE INFORMATION CO., LTD. School Manage System - SQL Injection
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password...
CVE-2020-10506
CVE-2020-10506 affects the School Manage System (before 2020) by ALLE INFORMATION CO., LTD. The vulnerability is a Path Traversal flaw that allows an attacker to access arbitrary files. The NVD entry lists a CVSSv3 base score of 7.5 (HIGH) , with network attack vector and no privileges required, ...
CVE-2020-10506 ALLE INFORMATION CO., LTD. School Manage System - Path Traversal
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files...
CVE-2020-10505
Summary (CVE-2020-10505): The School Manage System by ALLE INFORMATION CO., LTD. prior to 2020 contains an SQL Injection vulnerability that can be exploited via a union-based query to disclose database schema and credentials (username/password). Affected component: the School Manage System’s SQL ...
Command Execution Vulnerability in Scholastic Online School Computer Client
Scholastic Online School PC Client is an online learning software for primary and secondary schools. A command execution vulnerability exists in the Scholastic Online School computer client, which can be exploited by attackers to execute malicious code...
XSS Vulnerability in NewLogo New Beginnings Online School System
NewLogo New Beginning Online School System is an online education platform suitable for individuals and educational institutions to build. There is an XSS vulnerability in NewLogo New Beginning Online School System, which can be exploited by attackers to obtain sensitive information from websites...
Beijing 263 Enterprise Communication Co., Ltd. live online school has a logic flaw vulnerability
Beijing 263 Enterprise Communication Co., Ltd abbreviated as: 263 Enterprise Communication, provides one-stop online education service solutions combining hardware and software for the education industry. Beijing 263 Enterprise Communication Co., Ltd. live online school there is a logic flaw...
britishschool.g12.br Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1106404 Security Researcher MrRain1996 Helped patch 1055 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting britishschool.g12.br...
aSc TimeTables 2020.11.4 - Denial of Service (PoC)
Exploit Title: aSc TimeTables 2020.11.4 - Denial of Service PoC Date: 2020-24-02 Exploit Author: Ismael Nava Vendor Homepage: https://www.asctimetables.com/!/home Software Link: https://www.asctimetables.com/!/home/download Version: 2020.11.4 Tested on: Windows 10 Home x64 CVE : n/a STEPS Open th...
rajagirihss.ac.in Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1096793 Security Researcher geeknik Helped patch 8687 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rajagirihss.ac.in website...
monroe.k12.or.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1094020 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
sam-case.lincoln.k12.or.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1093983 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cnpweb.schools.utah.gov Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1089873 Security Researcher Gh05tPT Helped patch 6893 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cnpweb.schools.utah.gov...
wisconsinvirtualschool.org Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6851 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting wisconsinvirtualschool.org website and its users...
CVE-2014-9127
Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php...