4324 matches found
CVE-2014-9126
CVE-2014-9126 affects Open-School Community Edition 2.2. The vulnerability is described as multiple cross-site scripting (XSS) issues that allow remote attackers to inject arbitrary script/HTML via the YII_CSRF_TOKEN HTTP cookie or through the StudentDocument, StudentCategories, and StudentPrevio...
Open-School Community Edition Cross-Site Scripting Vulnerability
Open-School is a web-based school management software. The software offers online billing, attendance and online library.Open-School Community Edition is the community edition of Open-School. A cross-site scripting vulnerability exists in Open-School Community Edition version 2.2. The vulnerabili...
School Management Software PHP/mySQL CSRF Vulnerability
School Management Software PHP/mySQL is a WEB school ERP management program. A cross-site request forgery vulnerability exists in School Management Software PHP/mySQL 2019-03-14 and prior versions. The vulnerability stems from the WEB application not adequately verifying that requests are coming...
greenlakeschool.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1083082 Security Researcher Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting greenlakeschool.com...
cumberland.k12.wi.us Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6836 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cumberland.k12.wi.us website and its users. Following...
cashton.k12.wi.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1082968 Security Researcher Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cashton.k12.wi.us websit...
School ERP System 1.0 - Cross Site Request Forgery (Add Admin) Exploit
Exploit for php platform in category web applications Title: School ERP System 1.0 - Cross Site Request Forgery Add Admin Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/projects/school-erp-ultimate/files/ Software Link:...
School ERP System 1.0 Cross Site Request Forgery
Title: School ERP System 1.0 - Cross Site Request Forgery Add Admin Date: 2020-01-31 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/projects/school-erp-ultimate/files/ Software Link: https://sourceforge.net/projects/school-erp-ultimate/files/ Version ERP-Ultimate Tested on...
School ERP System 1.0 - Cross Site Request Forgery (Add Admin)
Title: School ERP System 1.0 - Cross Site Request Forgery Add Admin Date: 2020-01-31 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/projects/school-erp-ultimate/files/ Software Link: https://sourceforge.net/projects/school-erp-ultimate/files/ Version ERP-Ultimate CVE:...
CVE-2020-8505
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=deleteadmin CSRF to delete a user...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8504
CVE-2020-8504 is a cross-site request forgery in School Management Software PHP/MySQL up to 2019-03-14 that allows an attacker to coerce an authenticated user to create an administrative account via the URL path office_admin/?action=addadmin. The vulnerability's root cause is CSRF lacking adequat...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8505
CVE-2020-8505 affects School Management Software PHP/MySQL (through 2019-03-14). The vulnerability is a Cross-Site Request Forgery that can trigger office_admin/?action=deleteadmin to delete a user. Documented in NVD with CVSS v2 base 4.3 (Partial integrity impact) and CVSS v3.1 base 6.5 (Partial...
CVE-2020-8505
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=deleteadmin CSRF to delete a user...
lothianwineschool.com Cross Site Scripting vulnerability
Security Researcher CityBoy Helped patch 88 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting lothianwineschool.com website and its users. Following...
birminghamwineschool.com Cross Site Scripting vulnerability OBB-1068228
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Scammers Dupe Texas School District Out of $2.3M
A Texas school district, based outside of Austin, Tex., has lost $2.3 million after falling victim to an email scam. The Manor Independent School District encompasses 8,000 students from elementary to high school. Police told local news outlets that the incident started in early November and...
SQL Injection Vulnerability in the Backend Management Login Interface of Angel School Training Website System
Angel school training website system is an open source website management system. Angel school training website system back-end management login interface SQL injection vulnerability, attackers can use this vulnerability to obtain sensitive database information...