Skip to content
OpenAdvisories

Archive

9 April 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.3

    School Club Application System cross site scripting

    A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a …

  • Medium 6.5

    School Club Application System resource injection

    A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be…