Lucene search

K
osvGoogleOSV:CVE-2020-6138
HistorySep 01, 2020 - 9:15 p.m.

CVE-2020-6138

2020-09-0121:15:12
Google
osv.dev
5

7.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.4%

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability.

7.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.4%