CVE-2020-8505

School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=deleteadmin CSRF to delete a user...

CVE-2020-8505

CVE-2020-8505 affects School Management Software PHP/MySQL (through 2019-03-14). The vulnerability is a Cross-Site Request Forgery that can trigger office_admin/?action=deleteadmin to delete a user. Documented in NVD with CVSS v2 base 4.3 (Partial integrity impact) and CVSS v3.1 base 6.5 (Partial...

lothianwineschool.com Cross Site Scripting vulnerability

Security Researcher CityBoy Helped patch 88 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting lothianwineschool.com website and its users. Following...

birminghamwineschool.com Cross Site Scripting vulnerability OBB-1068228

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Scammers Dupe Texas School District Out of $2.3M

A Texas school district, based outside of Austin, Tex., has lost $2.3 million after falling victim to an email scam. The Manor Independent School District encompasses 8,000 students from elementary to high school. Police told local news outlets that the incident started in early November and...

Logic Flaw Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface has a logic flaw vulnerability that can be exploited by an attacker to violently break the administrator's password...

Unauthorized Access Vulnerability in Angel School Training Website System

Angel school training website system is an open source website management system. Angel School Training Website System suffers from an unauthorized access vulnerability, which can be exploited by an attacker to overstep his authority to view sensitive information...

SQL Injection Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface SQL injection vulnerability, attackers can use this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Background Administration A***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management At.asp page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Background Administration C***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management Ct.asp page there is a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Command Execution Vulnerability in School-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. A command execution vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by an attacker to execute malicious commands...

XSS Vulnerability in the User Registration Page of Angel School's Training Website System

Angel school training website system is an open source website management system. Angel school training website system user registration page has an XSS vulnerability that can be exploited by attackers to execute malicious script code...

SQL Injection Vulnerability in School Worry-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. A SQL injection vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by attackers to obtain sensitive information from the database...

XSS vulnerability in the frontend of Angel School's training website system

Angel school training website system is an open source website management system. Angel School Training Website System has an XSS vulnerability in the front-end that can be exploited by attackers to execute malicious script code...

school-of-music.focus.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1031812 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting school-of-music.focus.tv...

Logic Flaw Vulnerability in S-CMS School Building System

S-CMS School Building System is a content management system for school websites. S-CMS School Building System has a logic flaw vulnerability that can be exploited by attackers to conduct mailbox bombing attacks...

Volunteering with Girls Who Code

Volunteering with Girls Who Code has been one of the most enriching and edifying experiences of my time here at Akamai. I was chosen to serve as a mentor to one of the high school students, gave the NOCC tour...

S-CMS School Building System v1.0 SQL Injection Vulnerability in Backend a*** S_s*** Parameter

S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background a Ss parameter, which can be exploited by attackers to obtain sensitive information from the database...

S-CMS School Building System v1.0 SQL Injection Vulnerability in Background aj*** U_*** Parameter

S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background aj U parameter, which can be exploited by attackers to obtain sensitive information from the database...

S-CMS School Building System v1.0 SQL Injection Vulnerability in Background aj*** S_*** Parameters

S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background aj S parameter, which can be exploited by attackers to obtain sensitive information from the database...