openSIS SQL Injection Vulnerability (CNVD-2020-50528)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the bday parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...