School ERP Ultimate 2018 SQL Injection

Exploit Title: School ERP Ultimate 2018 - 'fid' SQL Injection Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

School ERP Ultimate 2018 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Ultimate 2018 - Arbitrary File Download Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software...

School ERP Ultimate 2018 - Arbitrary File Download

Exploit Title: School ERP Ultimate 2018 - Arbitrary File Download Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

garlingeprimary.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-687446 Description| Value ---|--- Affected Website:| garlingeprimary.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

S-CMS School Building System SQL Injection Vulnerability in Frontend

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the frontend of the S-CMS school website builder system. Attackers can use the vulnerability t...

Shanghai Pengda Computer System Development Co., Ltd.'s School Integrated Management System Exists with Override Access Vulnerability

Shanghai Pengda Computer System Development Co., Ltd. is a company dedicated to vocational education informatization solutions. There is an overstepping access vulnerability in the School Integrated Management System of Shanghai Pengda Computer System Development Co. An attacker can use the...

Mobile Device Access Predicted to Surpass Desktop This Holiday Season

By Chris Wraight and Charles Choe The U.S. back-to-school shopping period is a hectic time when parents are busy purchasing items for their children such as pencils, books, electronics and new clothes; back-to-college is just as important and is now tracked separately. According to the National...

Twenty Years of Network Security Monitoring: From the AFCERT to Corelight

I am really fired up to join Corelight. I’ve had to keep my involvement with the team a secret since officially starting on July 20th. Why was I so excited about this company? Let me step backwards to help explain my present situation, and forecast the future. Twenty years ago this month I joined...

S-CMS School Building System SQL Injection Vulnerability at Forum Page (CNVD-2018-19275)

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the forum page of the S-CMS School Building System. An attacker can exploit the vulnerability to...

SQL injection vulnerability in the article submission interface of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the article submission interface of S-CMS School Building System. An attacker can exploit the...

Arbitrary File Download Vulnerability in S-CMS School Building System

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is an arbitrary file download vulnerability in S-CMS school website system. The vulnerability is due to the background management...

SQL Injection Vulnerability at User Information Modification Interface of S-CMS School Building System (CNVD-2018-19272)

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the user information modification interface of S-CMS. An attacker can exploit the vulnerability ...

S-CMS School Website Builder System SQL Injection Vulnerability at Forum Page

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the forum page of the S-CMS School Building System. An attacker can exploit the vulnerability to...

manchesterps.vic.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-667439 Description| Value ---|--- Affected Website:| manchesterps.vic.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

A week in security (August 13 – August 19)

Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...

cactustefl.com XSS vulnerability

Open Bug Bounty ID: OBB-665627 Description| Value ---|--- Affected Website:| cactustefl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cliftonwineschool.com XSS vulnerability

Open Bug Bounty ID: OBB-664459 Description| Value ---|--- Affected Website:| cliftonwineschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Back to school cybersecurity: hints, tips, and links for a safer school year

It's that time of year again when parents are slowly gearing up for a new school term. Some schools have a strict policy of only using their own pre-approved lab devices, while others allow students to bring their own devices. Whatever the plan, it's never too early to start thinking about some o...

Back-to-School Cyber Safety

As summer break ends, many students will return to school with mobile devices, such as smart phones, tablets, and laptops. Although these devices can help students with their schoolwork and stay in touch with family and friends, there are risks associated with using them. However, there are simpl...

school-we.ru XSS vulnerability

Open Bug Bounty ID: OBB-661687 Description| Value ---|--- Affected Website:| school-we.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...