4627 matches found
CVE-2023-36317
CVE-2023-36317 affects sourcecodester Student Study Center Desk Management System 1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via a crafted GET request to the web application URL that could allow arbitrary code execution in the user’s browser/session. Documents do not provid...
Student Study Center Desk Management System 跨站脚本漏洞
Student Study Center Desk Management System is a student study center desk management system. A security vulnerability exists in Student Study Center Desk Management System version 1.0. An attacker can exploit this vulnerability by sending a specially crafted GET request to run arbitrary code...
CVE-2023-39094
Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...
CVE-2023-39094
Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...
Cross site scripting
Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...
Moodle Session Hijack Vulnerability (MSA-21-0032)
Moodle is prone to a Session Hijack risk vulnerability when Shibboleth authentication is enabled. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Data Leak Exposes 572 GB of Student, Faculty Info from Accreditation Org
By Habiba Rashid The data leak originated from a database owned by the Southern Association of Independent Schools, Inc. SAIS. This is a post from HackRead.com Read the original post: Data Leak Exposes 572 GB of Student, Faculty Info from Accreditation Org...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12566)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12566 advisory. - firewire: fix potential uaf in outboundphypacketcallback Chengfeng Ye Orabug: 35493606 CVE-2023-3159 - ath9k: fix use-after-free in ath9khifusbrxcb...
CVE-2023-33580
Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting XSS in the "Admin Name" field on Admin Profile page...
CVE-2023-33580
Phpgurukul Student Study Center Management System V1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Admin Name field on the Admin Profile page. The root cause is inadequate input sanitization/validation for the Admin Name, allowing injected JavaScript to be stored and e...
Ransomware attackers email bemused students as leverage for a payout
The University of Manchester has fallen victim to a ransomware gang, who are currently applying an interesting twist to their attack. Blackmail and pressure are two ways to extract funds from potential victims. We see this in sextortion cases, as well as in social engineering. Here, the fraudster...
Student Study Center Management System 跨站脚本漏洞
Student Study Center Management System is a student study center management system from the individual developer ANUJ KUMAR. A security vulnerability exists in Student Study Center Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability...
Student Study Center Management System v1.0 - Stored Cross-Site Scripting Vulnerability
Exploit Title: Student Study Center Management System v1.0 - Stored Cross-Site Scripting XSS Exploit Author: VIVEK CHOUDHARY @sudovivek Version: V1.0 Tested on: Windows 10 Vendor Homepage: https://phpgurukul.com Software Link:...
CVE-2023-34962
Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes...
CVE-2023-34962
Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes...
Improper access control
Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...
CVE-2023-34958
Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...
CVE-2023-34962
CVE-2023-34962 affects Chamilo LMS v1.11.x up to v1.11.18, where an incorrect access control allowed a student to arbitrarily access and modify another student’s personal notes. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE List, etc.) with a high impact (C/H/I/H; CVSS 3.1...
