CVE-2020-13382

openSIS through 7.4 has Incorrect Access Control...

CVE-2020-13381

OpenSIS

CVE-2020-13381

openSIS through 7.4 allows SQL Injection...

CVE-2020-13380

OpenSIS 7.4 and earlier are affected by a SQL Injection vulnerability. The issue arises from insufficient validation of externally supplied SQL statements in database-backed components, enabling potentially unauthorized data access and manipulation. Affected parts include multiple endpoints (e.g....

CVE-2020-13380

openSIS before 7.4 allows SQL Injection...

OpenSIS 7.4 SQL Injection

SQL Injection vulnerability in OpenSIS eventid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

PT-2020-13506 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows SQL Injection. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

PT-2020-13508 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows Directory Traversal. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

openSIS Unauthenticated PHP Code Execution

This module exploits multiple vulnerabilities in openSIS 7.4 and prior versions which could be abused by unauthenticated attackers to execute arbitrary PHP code with the permissions of the webserver. The exploit chain abuses an incorrect access control issue which allows access to scripts which...

openSIS 7.4 Multiple SQL Injection Vulnerabilties

Exploit for php platform in category web applications ----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior...

openSIS 7.4 Incorrect Access Control Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------- openSIS = 7.4 Incorrect Access Control Vulnerabilities ------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and...

openSIS 7.4 Incorrect Access Control

------------------------------------------------------- openSIS = 7.4 Incorrect Access Control Vulnerabilities ------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerabilities Description: The...

openSIS 7.4 Local File Inclusion Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------------- openSIS = 7.4 Bottom.php Local File Inclusion Vulnerability -------------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions...

openSIS 7.4 Local File Inclusion

-------------------------------------------------------------- openSIS = 7.4 Bottom.php Local File Inclusion Vulnerability -------------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerability...

openSIS 7.4 SQL Injection

----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerabilities Description: The applicatio...

CVE-2014-8366

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...

CVE-2014-8366

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...

Sql injection

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...

CVE-2014-8366

CVE-2014-8366 affects openSIS 4.5–5.3, where an SQL injection flaw in index.php allows remote attackers to execute arbitrary SQL via the Username and password fields. Root cause is improper handling of user-supplied input in the login mechanism, enabling manipulation of the underlying database. R...

CVE-2014-8366

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php...