4250 matches found
S-CMS School Building System v1.0 SQL Injection Vulnerability in Background aja*** U_s** Parameters
S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the aja Us parameter in the background, which allows attackers to obtain sensitive information from the database...
Device Hopping Shoppers Drive Up Bounce Rates Leading Into Holiday 2019
Executive Summary In 2018, Akamai reported for the first time that shoppers used mobile devices more than desktops for all the major peak traffic events we measured. Interestingly, they often don't complete their purchase on a mobile device. If the most recently concluded back-to-school shopping...
College-Management-System 1.2 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: College-Management-System 1.2 - Authentication Bypass Author: Cakes Vendor Homepage: https://github.com/ajinkyabodade/College-Management-System Software Link:...
College-Management-System 1.2 Authentication Bypass
Exploit Title: College-Management-System 1.2 - Authentication Bypass Author: Cakes Discovery Date: 2019-09-14 Vendor Homepage: https://github.com/ajinkyabodade/College-Management-System Software Link: https://github.com/ajinkyabodade/College-Management-System/archive/master.zip Tested Version: 1....
FBI Safe Online Surfing Challenge
The Federal Bureau of Investigation FBI has launched the Safe Online Surfing SOS Challenge, encouraging educators to promote web literacy and safety for students during the 2019-20 school year. FBI developed the program to educate children on how to navigate the web securely using activities that...
Back-to-School Scams Target Students with Library-Themed Emails
College students settling back into school might want to think twice before clicking on an email prompting them to renew their school library account. Researchers warn that students at hundreds of universities worldwide are being targeted with fake emails this week, which tout attachments or link...
Information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform
Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is an information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated...
SQL injection vulnerability in the L_sort parameter of the aj***.php page of the S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school site building system aj.php page Lsort parameter there is a SQL injection vulnerability, an attacker can use the...
SQL injection vulnerability in the S_show parameter of the aj***.php page of the S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php page Sshow parameter SQL injection vulnerability, an attacker can use the vulnerability to...
CVE-2019-15487
DfE School Experience before v16333-GA has XSS via a teacher training URL...
Design/Logic Flaw
DfE School Experience before v16333-GA has XSS via a teacher training URL...
CVE-2019-15487
DfE School Experience before v16333-GA has XSS via a teacher training URL...
CVE-2019-15487
CVE-2019-15487 affects DfE School Experience prior to v16333-GA, with reflected cross-site scripting (XSS) via a teacher training URL. The connected documents confirm the vulnerability type (XSS) and the affected release (before v16333-GA) but do not provide additional technical specifics such as...
SQL injection vulnerability in the front-end am***.php page of S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end am.php page of S-CMS School Building System. Attackers can use the vulnerability...
SQL injection vulnerability in in***.php page of S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front in.php page of S-CMS School Building System. Attackers can use the vulnerability to...
Trojans, ransomware dominate 2018–2019 education threat landscape
Heading into the new school year, we know educational institutions have a lot to worry about. Teacher assignments. Syllabus development. Gathering supplies. Readying classrooms. But one issue should be worrying school administrators and boards of education more than most: securing their networks...
Teen Hacker Finds Bugs in School Software That Exposed Millions of Records
Some kids play in a band after school. Bill Demirkapi hacked two education software giants...
Open-School SQL Injection Vulnerability
Open-School is a Web-based school management software. The software provides online fee collection, attendance and online library features. A SQL injection vulnerability exists in Open-School version 2.3 Community Edition and version 3.0, which stems from a lack of validation of externally entere...
Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting Vulnerability Exploit Author: Greg.Priest Vendor Homepage: https://open-school.org/ Software Link: Version: Open-School 3.0/Community Edition 2.3 Tested on: Windows/Linux CVE :...