| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 6 Jun 2008 04:03:00 -0000 From: DoZ@...kersCenter.com To: bugtraq@...urityfocus.com Subject: SchoolCenter URL Handling Cross Site Scripting Vulnerability SchoolCenter URL Handling Cross Site Scripting Vulnerability A vulnerability has been identified in SchoolCenter Software, which could be exploited to conduct cross site scripting attacks. Attackers can run arbitrary code that can be executed by the user's browser in the security context of an affected site. Attackers can exploit these issues via a web client. Hackers Center Security Group (http://www.hackerscenter.com) Credit: Doz Class: Cross Site Scripting Remote: Yes Risk: Medium Product: SchoolCenter Vendor: http://www.schoolcenter.net Version: 8.0 & Previous http://www.site.com/education/components/docmgr/default.php?sectiondetailid=2179&fileitem=477&catfilter=XSS http://www.site.com/education/components/docmgr/default.php?sectiondetailid=#XSS http://www.site.com/education/components/scrapbook/default.php?sectiondetailid=#XSS http://www.site.com/education/district/district.php?sectiondetailid=#XSS http://www.site.com/education/admin/XSS http://www.site.com/education/components/XSS http://www.site.com/education/components/whatsnew/default.php?sectiondetailid=#XSS
Powered by blists - more mailing lists