SchoolCenter versions 8.0 and below suffer from a URL handling cross site scripting vulnerability.
2e60f98e4c8e0ba904bcdadd443411a7ae55d711a435b722329fa1970cdaae07
SchoolCenter URL Handling Cross Site Scripting Vulnerability
A vulnerability has been identified in SchoolCenter Software, which could be exploited to conduct cross site scripting attacks. Attackers can run arbitrary code that can be executed by the user's browser in the security context of an affected site. Attackers can exploit these issues via a web client.
Hackers Center Security Group (http://www.hackerscenter.com)
Credit: Doz
Class: Cross Site Scripting
Remote: Yes
Risk: Medium
Product: SchoolCenter
Vendor: http://www.schoolcenter.net
Version: 8.0 & Previous
http://www.site.com/education/components/docmgr/default.php?sectiondetailid=2179&fileitem=477&catfilter=XSS
http://www.site.com/education/components/docmgr/default.php?sectiondetailid=#XSS
http://www.site.com/education/components/scrapbook/default.php?sectiondetailid=#XSS
http://www.site.com/education/district/district.php?sectiondetailid=#XSS
http://www.site.com/education/admin/XSS
http://www.site.com/education/components/XSS
http://www.site.com/education/components/whatsnew/default.php?sectiondetailid=#XSS