Lucene search
+L

5345 matches found

zdt
zdt
•added 2013/10/01 12:00 a.m.•35 views

FreeSMS (Free Student Management System) 2.1.2 Multiple Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

7.1AI score
SaveExploits0
NVD
NVD
•added 2013/09/06 11:15 a.m.•29 views

CVE-2013-3601

Coursemill Learning Management System LMS 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter...

6CVSS6.5AI score0.01027EPSS
SaveExploits0References1
Prion
Prion
•added 2013/09/06 11:15 a.m.•25 views

Code injection

Coursemill Learning Management System LMS 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter...

6CVSS6.9AI score0.01027EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/06 12:00 a.m.•7 views

CVE-2013-3601: Undefined Security Weakness

Coursemill Learning Management System LMS 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter...

6CVSS6AI score0.01027EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2013/08/15 12:00 a.m.•13 views

ASP学生成绩查询系统 /admin/online.asp 安全模式绕过漏洞

No description provided by source...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2013/07/16 8:24 p.m.•13 views

College Student Gets Year in Prison for Wire Fraud in Tampering With Student Election

A former Cal State San Marcos student was sentenced to a year in prison this week for wire fraud and other charges related to election tampering by using keystroke loggers to grab student credentials and then vote for himself. Matthew Weaver, 22, of Huntington Beach, Calif., stole almost 750...

0.2AI score
SaveExploits0References2
NVD
NVD
•added 2013/05/25 3:18 a.m.•26 views

CVE-2013-2079

mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download aka downloadall requests, which allows remote authenticated users to read other users' assignment...

4CVSS6AI score0.01229EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2013/05/25 3:18 a.m.•27 views

CVE-2013-2079

mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download aka downloadall requests, which allows remote authenticated users to read other users' assignment...

4CVSS5.9AI score0.01229EPSS
SaveExploits0References3
Prion
Prion
•added 2013/05/25 3:18 a.m.•19 views

Code injection

mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download aka downloadall requests, which allows remote authenticated users to read other users' assignment...

4CVSS6.5AI score0.01229EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2013/05/25 1:00 a.m.•66 views

CVE-2013-2079

The CVE-2013-2079 issue affects Moodle’s assignment module (Moodle versions 2.3.x before 2.3.7 and 2.4.x before 2.4.4). The vulnerability arises because mod/assign/locallib.php does not enforce capability requirements when processing ZIP assignment-archive download (downloadall) requests, allowin...

4CVSS6AI score0.01229EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/25 12:00 a.m.•2 views

CVE-2013-2080: Undefined Security Weakness

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

4CVSS5.8AI score0.01876EPSS
SaveExploits0References2
NVD
NVD
•added 2013/03/25 9:55 p.m.•28 views

CVE-2013-1829

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role...

4CVSS5.7AI score0.01118EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/25 12:00 a.m.•4 views

CVE-2013-1829: Exposure of Sensitive Information to an Unauthorized Actor

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role...

4CVSS5.9AI score0.01118EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2013/01/27 10:00 p.m.•45 views

CVE-2012-6106

calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated users to remove course-level calendar subscriptions by leveraging the student role and sending an iCalendar object...

6.1AI score0.01272EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/27 12:00 a.m.•4 views

CVE-2012-6106: Undefined Security Weakness

calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated users to remove course-level calendar subscriptions by leveraging the student role and sending an iCalendar object...

5.5CVSS5.8AI score0.01272EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2012/11/27 12:36 p.m.•14 views

Anonymous Takes Down NISD Over Student Tracking

Hacker group Anonymous claims he took down North-side Independent School District's website www.NISD.net on Saturday to protest the district's use of tracking badges. On Sunday, Nov. 25, the same hacktivist released a statement via Pastebin giving the school district "1-3 days" to meet with paren...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2012/10/29 9:35 p.m.•17 views

Student hacked into school's computer to obtain a girl's details

Matthew Higgins, now 20 and a university student, hacked into his school computer system to obtain a girl's details and then boasted on a hackers' forum. Matthew is son of a police inspector. Caernarfon Crown Court heard it was the case of a clever young man caught red-handed. The defendant says...

6.7AI score
SaveExploits0
NVD
NVD
•added 2012/10/17 12:55 a.m.•26 views

CVE-2012-3201

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

4CVSS5.2AI score0.01113EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/17 12:00 a.m.•5 views

CVE-2012-3201: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

4CVSS6AI score0.01113EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2012/10/17 12:00 a.m.•39 views

CVE-2012-3201

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

5.2AI score0.01113EPSS
SaveExploits0References4
Rows per page
Query Builder