Improper access control

openSIS through 7.4 has Incorrect Access Control...

Directory traversal

openSIS through 7.4 allows Directory Traversal...

Sql injection

openSIS before 7.4 allows SQL Injection...

CVE-2020-13383

openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...

CVE-2020-13383

openSIS through 7.4 allows Directory Traversal...

CVE-2020-13382

OpenSIS

CVE-2020-13382

openSIS through 7.4 has Incorrect Access Control...

CVE-2020-13381

OpenSIS

CVE-2020-13381

openSIS through 7.4 allows SQL Injection...

CVE-2020-13380

openSIS before 7.4 allows SQL Injection...

CVE-2020-13380

OpenSIS 7.4 and earlier are affected by a SQL Injection vulnerability. The issue arises from insufficient validation of externally supplied SQL statements in database-backed components, enabling potentially unauthorized data access and manipulation. Affected parts include multiple endpoints (e.g....

CVE-2020-13383: Improper Limitation of a Pathname to a Restricted Directory

openSIS through 7.4 allows Directory Traversal...

CVE-2020-13381: Improper Neutralization of Special Elements used in an SQL Command

openSIS through 7.4 allows SQL Injection...

CVE-2020-13382: Missing Authentication for Critical Function

openSIS through 7.4 has Incorrect Access Control...

PT-2020-13508 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows Directory Traversal. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

OpenSIS 7.4 SQL Injection

SQL Injection vulnerability in OpenSIS eventid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

PT-2020-13506 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows SQL Injection. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

openSIS 7.4 Local File Inclusion Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------------- openSIS = 7.4 Bottom.php Local File Inclusion Vulnerability -------------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions...

openSIS 7.4 Local File Inclusion

-------------------------------------------------------------- openSIS = 7.4 Bottom.php Local File Inclusion Vulnerability -------------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerability...

openSIS 7.4 SQL Injection

----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerabilities Description: The applicatio...