The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform allows a perpetrator to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary codes.

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...

The vulnerability of the Student Console component in the Faronics Insight computer network management platform allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Student Console component in the Faronics Insight computer network management platform involves bypassing the authentication process by using an alternative path or channel when handling endpoints. Exploiting this vulnerability allows a malicious actor to gain read, modif...

The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform allows a attacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle”...

The vulnerability of the Student Console component in the Faronics Insight computer network management platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Student Console component in the Faronics Insight computer network management platform is related to the unencrypted storage of confidential information in keyboard input logs. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3007

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3007

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

Sql injection

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

Design/Logic Flaw

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3007

The CVE-2023-3007 entry concerns ningzichun Student Management System 1.0. The vulnerability affects the Password Reset Handler’s resetPassword.php, where manipulating the sid parameter leads to weak password recovery. A remote attacker could exploit this, and public disclosure has occurred. Docu...

CVE-2023-3007 ningzichun Student Management System Password Reset resetPassword.php password recovery

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3008 ningzichun Student Management System login.php sql injection

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3008

CVE-2023-3008 affects ningzichun Student Management System 1.0, specifically the login.php file. The vulnerability is a SQL injection caused by manipulation of the user/pass parameter, exploitable remotely, with public disclosures of exploits. Multiple sources in the connected set confirm the sam...

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

CVE-2023-28350

An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher and Student Console applications, enabling an attacker to execute JavaScript in these applications. Due to the rich and highly privileged...

CVE-2023-28345

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to t...

CVE-2023-28350

An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher and Student Console applications, enabling an attacker to execute JavaScript in these applications. Due to the rich and highly privileged...