Back to CVEs & Disclosures
Security Assessment

28 Security Findings Across Institutional Portals

Coordinated security assessment of multiple college portals and institutional infrastructure; all issues reported to respective administrators.

Status
Reported to owners
Reported / Disclosed
2024 — 2025

Impact

  • Unauthenticated SQL injection leading to administrative database takeover.
  • Insecure Direct Object Reference (IDOR) leaking confidential student and applicant records.
  • Misconfigured CORS and authentication token leakage allowing session hijacking.
  • Detailed technical reports and remediation steps supplied to IT administration.

Timeline

  1. AUDIT INITIATION

    Systematic vulnerability scanning and manual black-box pentesting conducted.

  2. TRIAGE & REPORTING

    Documented severity-rated findings with PoCs delivered directly to cert/admin teams.

  3. REMEDIATION

    Assisted administration in verifying firewall rules and input sanitization patches.

aura~
Back to CVEs & Disclosures