openSIS SQL Injection Vulnerability (CNVD-2020-50949)

openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in MassDropModal.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...