webMathematica XSS Vulnerability

No description provided by source. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the "webMathematica" folder: http://www.example.com/webMathematica/MSP\scriptalert'a'/scrip...

webMathematica Cross Site Scripting

Hi list I tried to follow the RainForest Puppy Policy, but Wolfram didn't respond to my email within 5 days. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the...

Malware Messes up Online Test for Business Schools

The move by India’s top business schools to take their CAT entrance test online turned embarrassing after malware-infected computers left a number of students unable to take the test. Prometric, a Baltimore, Maryland testing company hired to conduct the CAT Common Admission Test, said this week...

AlumniServer 1.0.1 - Authentication Bypass

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!...GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTION...

Unfixed XSS vulnerability at www.carsoncityschools.com

Security researcher JoCk3r, has submitted on 11/09/2008 a cross-site-scripting XSS vulnerability affecting www.carsoncityschools.com, which at the time of submission ranked 2483544 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It ...

Site@School slideshow_full.php album_name Parameter SQL Injection

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...

Unfixed XSS vulnerability at www.springlakeparkschools.org

Security researcher cyber, has submitted on 19/08/2007 a cross-site-scripting XSS vulnerability affecting www.springlakeparkschools.org, which at the time of submission ranked 1903082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. ...

ExLibris Aleph and Metalib Cross Site Scripting Attack

ExLibris Aleph and Metalib Cross Site Scripting Attack ------------------------------------------------------ Matthew Cook Date 16/07/2007 http://escarpment.net/ http://escarpment.net/exlibris.txt Attack: Multiple versions of the ExLibris http://www.exlibrisgroup.com/ Aleph and Metalib products a...

Cross Site Scripting in Oliver Library Management System

BACKGROUND ========== "Oliver is the web-based Library Management System for Schools. Softlink has built on the understanding of thousands of school clients, over many years, and has designed a new system for school libraries and learning resource centres in the 21st century" -- from...

Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution

Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...