Design/Logic Flaw

The West Bend School District aka net.parentlink.westbend application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6966

The West Bend School District aka net.parentlink.westbend application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6966

The CVE-2014-6966 entry concerns the West Bend School District Android app (version 4.0.500, net.parentlink.westbend). The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-6807

The OLA School aka com.conduit.app00f9890a4f0145f2aae9d714e20b273a.app application 1.2.7.132 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The OLA School aka com.conduit.app00f9890a4f0145f2aae9d714e20b273a.app application 1.2.7.132 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6807

The OLA School aka com.conduit.app00f9890a4f0145f2aae9d714e20b273a.app application 1.2.7.132 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6807

CVE-2014-6807 affects the OLA School Android app (com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) version 1.2.7.132. The root cause is failure to verify X.509 certificates from SSL servers, which can let attackers perform a man-in-the-middle attack to spoof servers and obtain sensitive info...

procitydrivingschool.ca XSS vulnerability

Open Bug Bounty ID: OBB-48461 Description| Value ---|--- Affected Website:| procitydrivingschool.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Site@School <= 2.4.02 - Remote File Upload Exploit

No description provided by source. Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : = 2.4.02 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben...

NetSupport School 7.0/7.5 Weak Password Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9981/info NetSupport School is prone to a password-encryption vulnerability because the application fails to protect passwords with a sufficiently effective encryption scheme. Exploiting this issue may allow an attacker t...

School Management System Pro 6.0.0 Backup Dump Vulnerability

No description provided by source...

My School Script Data Base Download Vulnerability

No description provided by source. ======================================================================================== | Title : My School Script Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : DB ====================== Exploit By indoushka...

Middle School Homework Page 1.3 Beta 1 - Multiple Vulnerabilities

No description provided by source. Middle School Homework Page V1.3 Beta 1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:...

Site@School <= 2.4.10 (fckeditor) Session Hijacking / File Upload Exploit

No description provided by source. ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....:...

QQPlayer asx File Processing Buffer Overflow Exploit

No description provided by source. Title: QQPlayer asx File Processing Buffer Overflow Exploit Author: Li Qingshan of Information Security Engineering Center,School of Software and Microelectronics,Peking University Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Test: QQPlayer...

BPStudent 1.0 - Blind SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

Caloris Planitia Technologies School Management System 1.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17257/info Caloris Planitia Technologies School Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

aSc Timetables 2013 - Stack Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/python Title : ASC Timetables 2013 - Stack Buffer Overflow Vulnerability Researcher : Souhail Hammou Dark-Puzzle Research Team : http://itsecurity.ma Facebook : http://www.facebook.com/dark.puzzle.sec Date : 22/06/2013 Download Website :...

某学校综合管理平台存在通用型SQL注入

简要描述： 某学校综合管理平台存在通用型SQL注入，涉及不少学校。 详细说明： http://www.baidu.com/s?wd=%E6%8A%80%E6%9C%AF%E6%94%AF%E6%8C%81%EF%BC%9A56628124%2056626870 漏洞应用开发商：上海安脉计算机科技有限公司 1、http://ps.imau.edu.cn/anmai/login.aspx a、用WVS扫描，发现参数"txtUserName"存在post型SQL注入。 b、将post请求保存2s.txt的文件。 POST /anmai/getsession.asp HTTP/1.1...

多个学校教职工密码是弱口令

简要描述： 最近闲来无事，又要考试了，逛了下学校官网，搜了下我们英语老师的课表，居然出了老师的工号，于是尝试登录，果然进了。 详细说明： 学校官网：www.scatc.net GOOGLE:inurl:/jwweb/ 发现用这个系统的有很多学校 打开教师课表，搜索老师的课表，就可以知道老师的工号，用初始密码即可登录成功， 漏洞证明： https://images.seebug.org/upload/201405/19133942899f8d9355f3c2f50ef99ef0b4...