103 matches found
Arbitrary File Upload Vulnerability in Tesco's Online Teaching System
TAKESHI Online Teaching System is a digital learning system that integrates online teaching and course management. An arbitrary file upload vulnerability exists in the Tesco Web Teaching System, which can be exploited by an attacker to upload and run arbitrary code in a web server process to obta...
The new concept of foreign language network teaching platform ultra vires and arbitrary file upload vulnerabilities
No description provided by source...
SQL Injection Vulnerability in Experimental Teaching Intelligent Management System of Nanjing Xianji Technology Co.
Nanjing Xianji Technology Co., Ltd. experimental teaching intelligent management system is a set of teaching quality software system established for colleges and universities. A SQL injection vulnerability exists in the Experimental Teaching Intelligent Management System of Nanjing Aptar Technolo...
Remote Code Execution Vulnerability in Classroom Teaching System
Classroom Client is software that assists primary and secondary school teachers in electronic lesson planning. A generic remote code execution vulnerability exists in the Bantong teaching system. An attacker can exploit the vulnerability to execute arbitrary code and gain control of the web serve...
PowerCreator在线教学系统 /ShowResourceSkillComment.aspx 等3处 sql注入漏洞
No description provided by source...
PowerCreator online teaching system OpenCourse_new. aspx, etc. 2 SQL injection vulnerability
No description provided by source...
SQL Injection Vulnerability in Online Teaching Platform of Higher Education Publishing House
The Higher Education Publishing House Online Teaching Platform is a system that provides online teaching and learning. A SQL injection vulnerability exists in the Higher Education Publishing House Network Teaching Platform, which can be exploited by attackers to obtain sensitive information from...
Facebook Capture The Flag Platform Open Source
If you’ve been to DEF CON or any number of other technical hacker conferences, you’re familiar with Capture the Flag contests. These events pit teams of hackers and researchers against each other in a series of challenges until a winner is determined. Capture the Flag is also a valuable teaching...
THEOL网络教学平台 /common/script/search.jsp 参数keyword SQL注入漏洞
No description provided by source...
PowerCreator在线教学系统openCourse.aspx文件cid参数SQL注入漏洞
No description provided by source...
Fishes. Teaching child's game - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fishes. Teaching child's game published at the 'play' market has multiple vulnerabilities...
SQL Injection Vulnerability in the Teaching System of Beijing Oriental Centaline Education Technology Co.
Oriental Centrum is a developer, supplier and solution provider in the field of multimedia display and interactive teaching applications. A SQL injection vulnerability exists in the teaching system of Beijing Oriental Centrum Education Technology Co. Ltd. where an attacker can obtain database...
A teaching system of the present injection vulnerability
Brief description: RT Detailed description: SQL injection file: /anmai/SFManage/lookbookpreeshow. aspx Case: http://218.78.241.80/anmai/SFManage/lookbookpreeshow.aspx?year1=1 http://jmzx.xmedu.cn:9999/anmai/SFManage/lookbookpreeshow.aspx?year1=1...
上海安脉教学系统存在注入漏洞
简要描述: RT 详细说明: SQL注入文件: /anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx SQL注入案例: http://218.78.241.80/anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx?id=1 http://jmzx.xmedu.cn:9999/anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx?id=1...
Etiko CMS index.php cross-site scripting vulnerability-vulnerability warning-the black bar safety net
Affected system: Etiko Etiko CMS Description: CVECAN ID: CVE-2 0 1 4-8 5 0 5 Etiko CMS is a content management system. Etiko CMS did not effectively verify the index. php script input, in the realization on the presence of cross-site scripting vulnerability, a remote attacker with the structure o...
WHMCS SQL injection EXP-vulnerability warning-the black bar safety net
Localhost in the report WHMCS SQL injection, by the way, and EXP with the release, here it will be his turn! This site provides programmethodmay carry offensive,for security research and teaching purposes,at your own risk! !/ usr/bin/env python 2013/10/03 - WHMCS 5.2.7 SQL Injection...
JRE remote code execution 0DAY-vulnerability warning-the black bar safety net
Warning: this site provides programmethodmay carry offensive,for security research and teaching purposes,at your own risk! // // CVE-2 0 1 2-XXXX Java 0day // // reported here: http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html // // secret host / ip : ok.aa24.net /...
“The College of modern teaching management system”vulnerabilities and prevention-vulnerability and early warning-the black bar safety net
Some time ago in the group to see a buddy to share a“College of modern teaching management system”vulnerability, the method is very simple, soon will be able to get a webshell in. Principles and fck almost, also is the use of the upload function. ftb. imagegallery. aspx this is a upload function ...
phpcms 2 0 0 8 product.php the pagesize parameter code injection vulnerability-vulnerability warning-the black bar safety net
SSV-Appdir: phpcms Published: 2011-10-12 Affected version: phpcms 2 0 0 8 Vulnerability description: phpcms 2 0 0 8 of the code due to the template parameter improper handling can lead to arbitrary execution of arbitrary code file. The specific code triggering the path is this: phpcms/yp/product...
sipdroid 2.2 - SIP INVITE Response User Enumeration
source: https://www.securityfocus.com/bid/47710/info sipdroid is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. sipdroid 1.6.1, 2.0.1, and 2.2 running on Android 2.1 are vulnerable; other versions may als...