Security researcher Mr.brahm is found the XSS(cross site scripting) Vulnerability in Worlds top Universities Harvard University, Stanford University, Rice University, University OF Michigan Websites. they used other exploits to upload any file.

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users.
Cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007.
Mr.Brahm is the member on TEAM ICR(Indian Cyber Rakshak) and he is already informed this vulnerability to universities.
Below is the reference images:
I have sent email to researcher fo getting full information, Once I get the information I will update this.
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users.
Cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007.
Mr.Brahm is the member on TEAM ICR(Indian Cyber Rakshak) and he is already informed this vulnerability to universities.
Below is the reference images:
I have sent email to researcher fo getting full information, Once I get the information I will update this.