AOH :: HP Unsorted P :: C07-2383.HTM

Powerschool 404 Admin Exposure



Powerschool 404 Admin Exposure
Powerschool 404 Admin Exposure



Powerschool 4.3.6 and possibly other versions expose the admin interface when requesting any file with .js

This allows one to see some directory and file names inside the admin folder.

POC:

http://[powerschoolip]/admin/.js 

Product's website does not provide email contact? 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.