SQL Injection Vulnerability in Creative Yingfeng School Office OA System

Think Yingfeng School Office OA System is a comprehensive school management platform. A SQL injection vulnerability exists in versions 3.99 and earlier of the Creative Yingfeng School Office OA System. It allows attackers to exploit the vulnerability to obtain sensitive database information...

uplandhigh.org XSS vulnerability

Vulnerable URL: http://www.uplandhigh.org/search/searchresults?d=xterm=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 22:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

oakdale.k12.ca.us XSS vulnerability

Vulnerable URL: http://www.oakdale.k12.ca.us/search/searchresults?d=xterm=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 22:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

washingtoncolony.k12.ca.us XSS vulnerability

Vulnerable URL: http://www.washingtoncolony.k12.ca.us/cs/forgot.v Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 12:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...

校无忧学校网站系统 MoralsView.asp SQL注入漏洞

No description provided by source...

frankfurt-school.de XSS vulnerability

Vulnerable URL: http://www.frankfurt-school.de/content/de/toolbox/suche.html?queryStr=%00"=%2Fcontent%2Fde%2Fnewsroom%2Fnews Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

school.saint-albert.org XSS vulnerability

Vulnerable URL: http://school.saint-albert.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

kingfisher.k12.ok.us XSS vulnerability

Vulnerable URL: http://www.kingfisher.k12.ok.us/Default.asp?PN=AdvancedSearch=SearchNow Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

taylor.k12.fl.us XSS vulnerability

Vulnerable URL: http://www.taylor.k12.fl.us/Default.asp?PN=AdvancedSearch=SearchNow Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

stone.k12.ms.us XSS vulnerability

Vulnerable URL: http://www.stone.k12.ms.us/Default.asp?PN=AdvancedSearch=SearchNow Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

suring.k12.wi.us XSS vulnerability

Open Bug Bounty ID: OBB-69744 Description| Value ---|--- Affected Website:| suring.k12.wi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

johnsoncreek.k12.wi.us XSS vulnerability

Open Bug Bounty ID: OBB-69654 Description| Value ---|--- Affected Website:| johnsoncreek.k12.wi.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

johnsoncreek.k12.wi.us XSS vulnerability

Open Bug Bounty ID: OBB-69653 Description| Value ---|--- Affected Website:| johnsoncreek.k12.wi.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

orlandhigh.orlandusd.net XSS vulnerability

Open Bug Bounty ID: OBB-69000 Description| Value ---|--- Affected Website:| orlandhigh.orlandusd.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

sunprairie.k12.wi.us XSS vulnerability

Open Bug Bounty ID: OBB-68207 Description| Value ---|--- Affected Website:| sunprairie.k12.wi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eYou邮件系统邮件正文存储型XSS（HTML5特性并需点击）

简要描述： eyou邮件系统邮箱多为政府和学校使用，经测试存在xss。 详细说明： 由于eyou版本号不同，下面测试代码的效果也有细微区别，但是存在漏洞原因相同。 测试代码： 发送后打开，效果如图： 某党政机关邮箱： 某院校邮箱： 漏洞证明： 由于eyou版本号不同，下面测试代码的效果也有细微区别，但是存在漏洞原因相同。 测试代码： 发送后打开，效果如图： 某党政机关邮箱：...

President Proposes National Breach Notification Standard

Lacking precious detail, President Obama today proposed a national data breach notification standard, legislation that would mandate breached companies notify affected consumers inside of 30 days. The national law would supersede the current collection of state laws that govern notification...

CVE-2014-9505

Cross-site scripting XSS vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title...

Cross site scripting

Cross-site scripting XSS vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title...

CVE-2014-9505

Cross-site scripting XSS vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title...