OS4Ed openSIS Remote Code Execution Vulnerability

Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A remote code execution vulnerability exists in 'Modules.php' in OS4Ed openSIS 7.3, which stems from improper design or implementation during code development for ...

openSIS SQL Injection Vulnerability (CNVD-2020-51257)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheck.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50532)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ln parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50533)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the mn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50951)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the DownloadWindow.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50950)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the Validator.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51262)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the meetdate parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50956)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the passwordstfemail parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by...

openSIS SQL Injection Vulnerability (CNVD-2020-50527)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the courseperiodid parameter in MassScheduleSessionSet.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection...

openSIS SQL Injection Vulnerability (CNVD-2020-50948)

openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in CourseMoreInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50528)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the bday parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS Remote Code Execution Vulnerability (CNVD-2020-50534)

openSIS is a free, open source student information system/school management software. A remote code execution vulnerability exists in the install function in openSIS 7.4. An attacker can exploit this vulnerability by sending an HTTP request to inject PHP code into the Data.php file via the userna...

openSIS SQL Injection Vulnerability (CNVD-2020-50530)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the byear parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-52047)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51261)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...

CVE-2020-6142

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2020-6142

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2020-6143

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...

CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...