994 matches found
Sql injection
openSIS before 7.4 allows SQL Injection...
Sql injection
openSIS through 7.4 allows SQL Injection...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13383
openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13382
OpenSIS
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13381
openSIS through 7.4 allows SQL Injection...
CVE-2020-13381
OpenSIS
CVE-2020-13380
openSIS before 7.4 allows SQL Injection...
CVE-2020-13380
OpenSIS 7.4 and earlier are affected by a SQL Injection vulnerability. The issue arises from insufficient validation of externally supplied SQL statements in database-backed components, enabling potentially unauthorized data access and manipulation. Affected parts include multiple endpoints (e.g....
PT-2020-13508 · Os4Ed · Opensis
Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows Directory Traversal. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...
PT-2020-13506 · Os4Ed · Opensis
Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows SQL Injection. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...
OpenSIS 7.4 SQL Injection
SQL Injection vulnerability in OpenSIS eventid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
PT-2020-13507
Name of the Vulnerable Software and Affected Versions openSIS versions prior to 7.5 Description The issue is related to Incorrect Access Control. There is no information available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited...
PT-2020-13505
Name of the Vulnerable Software and Affected Versions openSIS versions prior to 7.4 Description The issue allows SQL Injection. Recommendations For versions prior to 7.4, update to version 7.4 or later to resolve the issue...
CVE-2020-13383: Improper Limitation of a Pathname to a Restricted Directory
openSIS through 7.4 allows Directory Traversal...