openSIS SQL Injection Vulnerability (CNVD-2020-50533)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the mn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

CVE-2020-6122

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2020-18936

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CheckDuplicateStudent.php page. The mn parameter in this page is vulnerable to SQL injection. An attacker can trigger this issue by making an authenticated HTTP request ...

CVE-2020-6122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...