Lancaster 25,000 students and 2,500-plus employees personal info hacked !

Lancaster 25,000 students and 2,500-plus employees personal info hacked ! Lancaster County Schools officials say computer hackers have gotten personal information on the system's 25,000 students and 2,500-plus employees. In a note posted on the school system's website and sent to students and...

Hacker sends teen's half-naked photo to Facebook, e-mail contacts !

BREMERTON — The partially naked photograph of a Bremerton teenager has managed to circulate to her e-mail contacts, teachers and even to colleges where she'd applied to school, according to Bremerton police reports. The girl said she'd sent a picture of herself wearing only underwear to her...

webMathematica XSS Vulnerability

No description provided by source. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the "webMathematica" folder: http://www.example.com/webMathematica/MSP\scriptalert'a'/scrip...

webMathematica Cross Site Scripting

Hi list I tried to follow the RainForest Puppy Policy, but Wolfram didn't respond to my email within 5 days. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the...

Malware Messes up Online Test for Business Schools

The move by India’s top business schools to take their CAT entrance test online turned embarrassing after malware-infected computers left a number of students unable to take the test. Prometric, a Baltimore, Maryland testing company hired to conduct the CAT Common Admission Test, said this week...

AlumniServer 1.0.1 - Authentication Bypass

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!...GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTION...

Unfixed XSS vulnerability at www.carsoncityschools.com

Security researcher JoCk3r, has submitted on 11/09/2008 a cross-site-scripting XSS vulnerability affecting www.carsoncityschools.com, which at the time of submission ranked 2483544 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It ...

Site@School slideshow_full.php album_name Parameter SQL Injection

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...

Unfixed XSS vulnerability at www.springlakeparkschools.org

Security researcher cyber, has submitted on 19/08/2007 a cross-site-scripting XSS vulnerability affecting www.springlakeparkschools.org, which at the time of submission ranked 1903082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. ...

ExLibris Aleph and Metalib Cross Site Scripting Attack

ExLibris Aleph and Metalib Cross Site Scripting Attack ------------------------------------------------------ Matthew Cook Date 16/07/2007 http://escarpment.net/ http://escarpment.net/exlibris.txt Attack: Multiple versions of the ExLibris http://www.exlibrisgroup.com/ Aleph and Metalib products a...

Cross Site Scripting in Oliver Library Management System

BACKGROUND ========== "Oliver is the web-based Library Management System for Schools. Softlink has built on the understanding of thousands of school clients, over many years, and has designed a new system for school libraries and learning resource centres in the 21st century" -- from...

Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution

Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...