openSIS SQL Injection Vulnerability (CNVD-2020-51261)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...