critical9.8
CVE-2020-6637
openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.
Impact
openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Os4ed | Opensis | Version 7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cinzinga.com/CVE-2020-6637/
- https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8
- https://opensis.com/
- https://sourceforge.net/projects/opensis-ce/files/
- https://cinzinga.com/CVE-2020-6637/
- https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8
- https://opensis.com/
- https://sourceforge.net/projects/opensis-ce/files/