PT-2020-19198

Name of the Vulnerable Software and Affected Versions openSIS Community Edition version 7.3 Description The issue allows for SQL injection via the USERNAME parameter of the "index.php" endpoint. Recommendations For openSIS Community Edition version 7.3, avoid using the USERNAME parameter in the...