994 matches found
CVE-2020-6637
openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...
CVE-2020-6637
OpenSIS Community Edition 7.3 is affected by CVE-2020-6637: a SQL injection through the USERNAME parameter in index.php. The Nuclei template confirms SQLi in OpenSIS 7.3 and describes the impact as the ability to execute arbitrary SQL queries, potentially leading to data access or manipulation. T...
PT-2020-19198
Name of the Vulnerable Software and Affected Versions openSIS Community Edition version 7.3 Description The issue allows for SQL injection via the USERNAME parameter of the "index.php" endpoint. Recommendations For openSIS Community Edition version 7.3, avoid using the USERNAME parameter in the...
CVE-2020-6637: Improper Neutralization of Special Elements used in an SQL Command
openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php...
openSIS 7.4 Unauthenticated PHP Code Execution Exploit
This Metasploit module exploits multiple vulnerabilities in openSIS 7.4 and prior versions which could be abused by unauthenticated attackers to execute arbitrary PHP code with the permissions of the webserver. The exploit chain abuses an incorrect access control issue which allows access to...
openSIS 7.4 Unauthenticated PHP Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'openSIS Unauthenticated PHP Code Execution', 'Description' = %q This module exploits multiple vulnerabilities in openSIS 7.4 and prior versions...
Open Solutions for Education openSIS SQL Injection Vulnerability (CNVD-2020-52193)
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A SQL injection vulnerability exists in Open Solutions for Education openSIS 7.4 and earlier versions, which stems from a lack of validation of externally entered...
Open Solutions for Education openSIS SQL Injection Vulnerability
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A SQL injection vulnerability exists in Open Solutions for Education openSIS 7.4 and prior versions. The vulnerability stems from a lack of validation of externall...
Unspecified Vulnerability in Open Solutions for Education openSIS
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A security vulnerability exists in the /Bottom.php script in Open Solutions for Education openSIS 7.4 and earlier versions. An attacker can exploit this...
Unspecified Vulnerability in Open Solutions for Education openSIS (CNVD-2021-19767)
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A security vulnerability exists in Open Solutions for Education openSIS 7.4 and prior versions that stems from improper access control. An attacker could exploit t...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13380
openSIS before 7.4 allows SQL Injection...
CVE-2020-13381
openSIS through 7.4 allows SQL Injection...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13381
openSIS through 7.4 allows SQL Injection...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13380
openSIS before 7.4 allows SQL Injection...
