CVE-2019-14696

Mô tả

Tham khảo

• packetstormsecurity.com/files/153984/Open-School-3.0-Community-Edition-2.3-Cross-Site-Scripting.html · Exploit
• open-school.org · Product
• pastebin.com/AgxqdbAQ · Third Party Advisory

Lỗ hổng khác của open-school

• CVE-2014-9127TRUNG BÌNH 6.5Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to …
• CVE-2014-9126TRUNG BÌNH 6.1Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web scri…
• CVE-2019-14754NGHIÊM TRỌNG 9.8Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
• CVE-2009-4208CAO 7.5SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary SQL commands via the …