openSIS SQL Injection Vulnerability (CNVD-2020-51262)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the meetdate parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

PT-2020-18942

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CoursePeriodModal.php page. This can be triggered by a specially crafted HTTP request, allowing an attacker to exploit the meet date parameter in the CoursePeriodModal.p...