openSIS SQL Injection Vulnerability (CNVD-2020-50955)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the usernamestfemail parameter in the password reset page /opensis/ResetUserInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker to obtain information by...