CVE-2020-10505 ALLE INFORMATION CO., LTD. School Manage System - SQL Injection

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password...

CVE-2020-10505

Summary (CVE-2020-10505): The School Manage System by ALLE INFORMATION CO., LTD. prior to 2020 contains an SQL Injection vulnerability that can be exploited via a union-based query to disclose database schema and credentials (username/password). Affected component: the School Manage System’s SQL ...

CVE-2020-10506

CVE-2020-10506 affects the School Manage System (before 2020) by ALLE INFORMATION CO., LTD. The vulnerability is a Path Traversal flaw that allows an attacker to access arbitrary files. The NVD entry lists a CVSSv3 base score of 7.5 (HIGH) , with network attack vector and no privileges required, ...

Command Execution Vulnerability in Scholastic Online School Computer Client

Scholastic Online School PC Client is an online learning software for primary and secondary schools. A command execution vulnerability exists in the Scholastic Online School computer client, which can be exploited by attackers to execute malicious code...

XSS Vulnerability in NewLogo New Beginnings Online School System

NewLogo New Beginning Online School System is an online education platform suitable for individuals and educational institutions to build. There is an XSS vulnerability in NewLogo New Beginning Online School System, which can be exploited by attackers to obtain sensitive information from websites...

Beijing 263 Enterprise Communication Co., Ltd. live online school has a logic flaw vulnerability

Beijing 263 Enterprise Communication Co., Ltd abbreviated as: 263 Enterprise Communication, provides one-stop online education service solutions combining hardware and software for the education industry. Beijing 263 Enterprise Communication Co., Ltd. live online school there is a logic flaw...

britishschool.g12.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1106404 Security Researcher MrRain1996 Helped patch 1055 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting britishschool.g12.br...

aSc TimeTables 2020.11.4 - Denial of Service (PoC)

Exploit Title: aSc TimeTables 2020.11.4 - Denial of Service PoC Date: 2020-24-02 Exploit Author: Ismael Nava Vendor Homepage: https://www.asctimetables.com/!/home Software Link: https://www.asctimetables.com/!/home/download Version: 2020.11.4 Tested on: Windows 10 Home x64 CVE : n/a STEPS Open th...

rajagirihss.ac.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1096793 Security Researcher geeknik Helped patch 8687 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rajagirihss.ac.in website...

monroe.k12.or.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1094020 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

sam-case.lincoln.k12.or.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1093983 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

cnpweb.schools.utah.gov Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1089873 Security Researcher Gh05tPT Helped patch 6893 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cnpweb.schools.utah.gov...

wisconsinvirtualschool.org Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6851 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting wisconsinvirtualschool.org website and its users...

CVE-2014-9126

Multiple cross-site scripting XSS vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YIICSRFTOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php...

CVE-2014-9127

Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php...

Open redirect

Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YIICSRFTOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php...

CVE-2014-9127

Open-School Community Edition 2.2 is affected by CVE-2014-9127: an access control bypass in the export feature allows remote authenticated users to view sensitive data via the r parameter set to export on index.php. The issue enables partial confidentiality impact as described in the CVE entry, w...

CVE-2014-9127

Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php...

CVE-2014-9126

Multiple cross-site scripting XSS vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YIICSRFTOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php...