OpenSIS Community Edition Cross-Site Scripting Vulnerability

Open Solutions For Education openSIS is an open source student information management system from Open Solutions for Education Open Solutions For Education. A cross-site scripting vulnerability exists in OpenSIS Community Edition versions prior to 7.5, which stems from being affected by the...

OpenSIS SQL Injection (CVE-2020-6637; CVE-2020-6137; CVE-2020-6138; CVE-2020-6139; CVE-2020-6140; CVE-2020-6141)

An SQL injection vulnerability exists in OpenSIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

openSIS SQL Injection Vulnerability (CNVD-2020-50529)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the bmonth parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50947)

openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in ChooseCP.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50949)

openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in MassDropModal.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50531)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the fn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51258)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheckOthers.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51259)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the GetSchool.php function in openSIS 7.3. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to conduct a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51260)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the courseperiodid parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection atta...

openSIS SQL Injection Vulnerability (CNVD-2020-50952)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the login function in OS4Ed openSIS 7.3, which can be exploited by an attacker to conduct a SQL injection attack by sending a specially crafted HTTP request...

openSIS SQL Injection Vulnerability (CNVD-2020-51257)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheck.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50955)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the usernamestfemail parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by...

openSIS SQL Injection Vulnerability (CNVD-2020-50954)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the uname parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by sending an...

OS4Ed openSIS Remote Code Execution Vulnerability

Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A remote code execution vulnerability exists in 'Modules.php' in OS4Ed openSIS 7.3, which stems from improper design or implementation during code development for ...

openSIS SQL Injection Vulnerability (CNVD-2020-50953)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the passwordstfemail parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by...

openSIS SQL Injection Vulnerability

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheck.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50532)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ln parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50533)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the mn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50951)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the DownloadWindow.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50530)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the byear parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...