CVE-2020-6125

OS4Ed openSIS 7.3 is affected by a SQL injection in GetSchool.php via the u parameter. The vulnerability allows an authenticated HTTP request to trigger SQL injection, potentially leaking or altering data. TALOS documents the vulnerable code path (GET /opensis/GetSchool.php?title=1&course_period_...