PT-2020-18951

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the password reset functionality. The password stf email parameter in the "/opensis/ResetUserInfo.php" API endpoint is vulnerable to SQL injection, allowing an attacker to...

PT-2020-18954

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the password reset functionality. The password stf email parameter in the "/opensis/ResetUserInfo.php" API endpoint is vulnerable to SQL injection, allowing an attacker to...

PT-2020-18953

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the password reset functionality. The username stf email parameter in the "/opensis/ResetUserInfo.php" API endpoint is vulnerable to SQL injection, allowing an attacker to...