Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-27811

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00272EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:30 p.m.1 views

CVE-2020-6124

An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS8.1AI score0.00392EPSS
Exploits1References1
Prion
Prion
added 2022/03/03 3:15 p.m.8 views

Cross site scripting

OS4ED openSIS 8.0 is affected by cross-site scripting XSS in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user...

4.3CVSS5.9AI score0.00272EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/03 2:4 p.m.11 views

CVE-2021-40637

OS4ED openSIS 8.0 is affected by cross-site scripting XSS in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user...

6.1AI score0.00272EPSS
Exploits1References1
CVE
CVE
added 2022/03/03 2:4 p.m.68 views

CVE-2021-40637

CVE-2021-40637 affects OS4ED OpenSIS 8.0. The vulnerability is a cross-site scripting (XSS) flaw in EmailCheckOthers.php, allowing an attacker to inject JavaScript to steal a user’s cookies and take over the user session. Documents reference affected product and the exact vulnerable file, with im...

6.1CVSS5.9AI score0.00272EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2020/09/02 12:0 a.m.1 views

openSIS SQL Injection Vulnerability (CNVD-2020-51258)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheckOthers.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

8.8CVSS7.8AI score0.00392EPSS
Exploits1References1
Prion
Prion
added 2020/09/01 3:15 p.m.7 views

Sql injection

An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

6.5CVSS8.9AI score0.00392EPSS
Exploits1References1Affected Software1
Talos
Talos
added 2020/08/31 12:0 a.m.87 views

OS4Ed openSIS email parameter SQL injection vulnerability

Summary An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested Versions OS4Ed openSIS 7.3...

8.8CVSS7.7AI score0.00392EPSS
Exploits2
Rows per page
Query Builder