716 matches found
Open Solutions for Education openSIS SQL Injection Vulnerability (CNVD-2020-52193)
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A SQL injection vulnerability exists in Open Solutions for Education openSIS 7.4 and earlier versions, which stems from a lack of validation of externally entered...
Unspecified Vulnerability in Open Solutions for Education openSIS (CNVD-2021-19767)
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A security vulnerability exists in Open Solutions for Education openSIS 7.4 and prior versions that stems from improper access control. An attacker could exploit t...
Unspecified Vulnerability in Open Solutions for Education openSIS
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A security vulnerability exists in the /Bottom.php script in Open Solutions for Education openSIS 7.4 and earlier versions. An attacker can exploit this...
CVE-2020-13381
openSIS through 7.4 allows SQL Injection...
CVE-2020-13380
openSIS before 7.4 allows SQL Injection...
CVE-2020-13380
openSIS before 7.4 allows SQL Injection...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13381
openSIS through 7.4 allows SQL Injection...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
Improper access control
openSIS through 7.4 has Incorrect Access Control...
Sql injection
openSIS through 7.4 allows SQL Injection...
Sql injection
openSIS before 7.4 allows SQL Injection...
Directory traversal
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13383
openSIS through 7.4 allows Directory Traversal...
CVE-2020-13383
openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...
CVE-2020-13382
openSIS through 7.4 has Incorrect Access Control...