CVE-2020-13382

openSIS through 7.4 has Incorrect Access Control...

Sql injection

openSIS through 7.4 allows SQL Injection...

Directory traversal

openSIS through 7.4 allows Directory Traversal...

Improper access control

openSIS through 7.4 has Incorrect Access Control...

Sql injection

openSIS before 7.4 allows SQL Injection...

CVE-2020-13383

openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...

CVE-2020-13383

openSIS through 7.4 allows Directory Traversal...

CVE-2020-13382

OpenSIS

CVE-2020-13382

openSIS through 7.4 has Incorrect Access Control...

CVE-2020-13381

openSIS through 7.4 allows SQL Injection...

CVE-2020-13381

OpenSIS

CVE-2020-13380

openSIS before 7.4 allows SQL Injection...

CVE-2020-13380

OpenSIS 7.4 and earlier are affected by a SQL Injection vulnerability. The issue arises from insufficient validation of externally supplied SQL statements in database-backed components, enabling potentially unauthorized data access and manipulation. Affected parts include multiple endpoints (e.g....

PT-2020-13506 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows SQL Injection. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

PT-2020-13508 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows Directory Traversal. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

OpenSIS 7.4 SQL Injection

SQL Injection vulnerability in OpenSIS eventid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

openSIS Unauthenticated PHP Code Execution

This module exploits multiple vulnerabilities in openSIS 7.4 and prior versions which could be abused by unauthenticated attackers to execute arbitrary PHP code with the permissions of the webserver. The exploit chain abuses an incorrect access control issue which allows access to scripts which...

openSIS 7.4 Multiple SQL Injection Vulnerabilties

Exploit for php platform in category web applications ----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior...

openSIS 7.4 SQL Injection

----------------------------------------------------- openSIS = 7.4 Multiple SQL Injection Vulnerabilities ----------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerabilities Description: The applicatio...

openSIS 7.4 Local File Inclusion

-------------------------------------------------------------- openSIS = 7.4 Bottom.php Local File Inclusion Vulnerability -------------------------------------------------------------- - Software Link: https://opensis.com/ - Affected Versions: Version 7.4 and prior versions. - Vulnerability...