Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-6139
HistorySep 01, 2020 - 9:15 p.m.

Sql injection

2020-09-0121:15:00
PRIOn knowledge base
www.prio-n.com
1

0.002 Low

EPSS

Percentile

59.5%

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
opensiseq7.3

0.002 Low

EPSS

Percentile

59.5%