4250 matches found
shield.hms.harvard.edu XSS vulnerability
Open Bug Bounty ID: OBB-447847 Description| Value ---|--- Affected Website:| shield.hms.harvard.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
School CMS 1.0.0 Cross Site Scripting
| | Exploit Title: school cms Cross Site Scripting | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://www.sourcecodester.com/php/5400/school-website-cms.html | Software Link: https://www.sourcecodester.com/sites/default/files/download/arukumar/schoolcms.zip | Version:...
School CMS 1.0.0 File Uplaod
| | Exploit Title: school cms File Upload Vulnerability | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://www.sourcecodester.com/php/5400/school-website-cms.html | Software Link: https://www.sourcecodester.com/sites/default/files/download/arukumar/schoolcms.zip | Versio...
urallacentralschool.com XSS vulnerability
Open Bug Bounty ID: OBB-405051 Description| Value ---|--- Affected Website:| urallacentralschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-16561
/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...
Sql injection
/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...
CVE-2017-16561
/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...
CVE-2017-16561
/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...
CVE-2017-16561
CVE-2017-16561 affects Ingenious School Management System 2.3.0. Affected component: /view/friend_profile.php; vulnerability: Boolean-based and Time-based SQL injection in the GET parameter friend_index. Root cause: improper handling/concatenation of user input into SQL, enabling attacker to infl...
CVE-2017-16561
/view/friendprofile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friendindex' parameter of a GET request...
School cafeteria TV monitor plays porn leaving students baffled
By Carolina A Clayton County, Georgia, high school played pornographic content on its This is a post from HackRead.com Read the original post: School cafeteria TV monitor plays porn leaving students baffled...
Ingenious School Management System my_profile.php File Arbitrary File Upload Vulnerability
Ingenious School Management System is a web-based school management system. The system supports adding courses, posting grades and managing teachers. A security vulnerability exists in the myprofile.php file in Ingenious School Management System version 2.3.0. An attacker can exploit this...
AROX School ERP PHP Script SQL Injection
Exploit Title: AROX School ERP PHP Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
AROX School ERP PHP Script SQL Injection Vulnerability
AROX School ERP PHP Script is a web-based school management system. The system features enrollment management, class management, library management and fund management. A SQL injection vulnerability exists in AROX School ERP PHP Script version 1.0. A remote attacker can exploit this vulnerability...
Ingenious School Management System 2.3.0 - friend_index SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...
CVE-2017-15978
AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...
Sql injection
AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...
CVE-2017-15978
AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...
CVE-2017-15978
CVE-2017-15978 affects AROX School ERP PHP Script 1.0. The vulnerability is an SQL injection via the GET parameter id in office_admin/ (as shown in multiple sources, including Exploit-DB and CVE records). PoCs indicate time-based blind payloads (e.g., id parameter manipulation with AND SLEEP) to ...