Skip to content
OpenAdvisories

Vendor

janobe

41 known vulnerabilities.

20 results · Clear filters · Feed

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'.

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'.

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' …

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' …

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser ses…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

    Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser ses…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-Site Scripting (XSS) vulnerability in Janobe products

    Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via th…

  • High 7.1

    Cross-site Scripting in Janobe products

    Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/adm…

  • High 7.1

    Cross-site Scripting in Janobe products

    Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/adm…

  • High 7.1

    Cross-site Scripting in Janobe products

    Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure…

  • High 7.1

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'.

  • High 7.1

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'.

  • High 7.1

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' …

  • High 7.1

    Cross-site Scripting in Janobe E-Negosyo System

    Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view…