CVE-2020-6117

2020-09-0114:15:13

Google

osv.dev

sql injection

checkduplicatestudent.php

os4ed opensis 7.3

bday parameter

http request

authenticated attack

AI Score

Confidence

Low

EPSS

0.001

Percentile

39.3%

JSON

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

References

talosintelligence.com/vulnerability_reports/TALOS-2020-1072