CVE-2020-6126

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The courseperiodid parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities...

CVE-2020-6126

OS4Ed openSIS 7.3 is affected by CVE-2020-6126 due to SQL injection in CoursePeriodModal.php. The vulnerable parameters are course_period_id, id, and meet_date, where unsanitized input is used in SQL queries, enabling authenticated attackers to trigger injections via crafted HTTP requests. Talos ...

CVE-2020-6126: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The courseperiodid parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities...

PT-2020-18941

Name of the Vulnerable Software and Affected Versions openSIS version 7.3 Description A SQL injection issue exists in the CoursePeriodModal.php page. The id parameter in this page is vulnerable to SQL injection, allowing an attacker to trigger the issue with an authenticated HTTP request...

PT-2020-18940

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CoursePeriodModal.php page. The course period id parameter in this page is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger thi...

PT-2020-18942

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CoursePeriodModal.php page. This can be triggered by a specially crafted HTTP request, allowing an attacker to exploit the meet date parameter in the CoursePeriodModal.p...

CVE-2020-6128: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meetdate parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to...

CVE-2020-6127: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

OS4Ed openSIS CoursePeriodModal.php page multiple SQL injection vulnerabilities

Summary Multiple exploitable SQL injection vulnerabilities exist in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Tested Versions OS4Ed openSIS 7...