AOH :: HP Unsorted S :: BX3441.HTM

SchoolCenter URL Handling Cross Site Scripting Vulnerability



SchoolCenter URL Handling Cross Site Scripting Vulnerability
SchoolCenter URL Handling Cross Site Scripting Vulnerability



SchoolCenter URL Handling Cross Site Scripting Vulnerability


A vulnerability has been identified in SchoolCenter Software, which could be exploited to conduct cross site scripting attacks. Attackers can run arbitrary code that can be executed by the user's browser in the security context of an affected site. Attackers can exploit these issues via a web client.





Hackers Center Security Group (http://www.hackerscenter.com)
Credit: Doz

Class: Cross Site Scripting
Remote: Yes
Risk: Medium

Product: SchoolCenter
Vendor: http://www.schoolcenter.net
Version: 8.0 & Previous



http://www.site.com/education/components/docmgr/default.php?sectiondetailid=2179&fileitem=477&catfilter=XSS

http://www.site.com/education/components/docmgr/default.php?sectiondetailid=#XSS

http://www.site.com/education/components/scrapbook/default.php?sectiondetailid=#XSS

http://www.site.com/education/district/district.php?sectiondetailid=#XSS

http://www.site.com/education/admin/XSS

http://www.site.com/education/components/XSS

http://www.site.com/education/components/whatsnew/default.php?sectiondetailid=#XSS 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.