Lucene search

K
osvGoogleOSV:CVE-2020-6131
HistorySep 01, 2020 - 2:15 p.m.

CVE-2020-6131

2020-09-0114:15:14
Google
osv.dev
4
cve-2020-6131
sql injection
os4ed opensis
massschedulesessionset.php
http request
vulnerability

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

39.3%

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

39.3%

Related for OSV:CVE-2020-6131