Ingenious School Management System 2.3.0 - friend_index SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

AROX School ERP PHP Script SQL Injection Vulnerability

AROX School ERP PHP Script is a web-based school management system. The system features enrollment management, class management, library management and fund management. A SQL injection vulnerability exists in AROX School ERP PHP Script version 1.0. A remote attacker can exploit this vulnerability...

Sql injection

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

CVE-2017-15978 affects AROX School ERP PHP Script 1.0. The vulnerability is an SQL injection via the GET parameter id in office_admin/ (as shown in multiple sources, including Exploit-DB and CVE records). PoCs indicate time-based blind payloads (e.g., id parameter manipulation with AND SLEEP) to ...

PT-2017-14332

Name of the Vulnerable Software and Affected Versions AROX School ERP PHP Script version 1.0 Description The issue allows SQL Injection via the id parameter in the office admin endpoint. Recommendations For AROX School ERP PHP Script version 1.0, consider restricting access to the office admin...

AROX School ERP PHP Script - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AROX School ERP PHP Script - SQL Injection Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978 Category: Webapps Teste...

Ingenious 2.3.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

CVE-2017-15978: Improper Neutralization of Special Elements used in an SQL Command

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

AROX School ERP PHP Script - id SQL Injection

AROX School ERP PHP Script - id SQL Injection Exploit Title: AROX School ERP PHP Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978...

Ingenious 2.3.0 - Arbitrary File Upload

Ingenious 2.3.0 - Arbitrary File Upload Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo:...

SQL Injection Vulnerability in School Worry-free Personnel Payroll System v2.5

The School Worry-Free Personnel Payroll System is a general-purpose dynamic personnel payroll management software. A SQL injection vulnerability exists in School Worry-Free Personnel Payroll System v2.5, which can be exploited by an attacker to access or modify database data due to insufficient...

AROX School ERP PHP Script - 'id' SQL Injection

Exploit Title: AROX School ERP PHP Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Ingenious 2.3.0 - Arbitrary File Upload

Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: N/...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

Arbitrary file deletion

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

CVE-2017-15957

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...