Lucene search
K

7 matches found

CNVD
CNVD
added 2020/09/02 12:0 a.m.1 views

openSIS SQL Injection Vulnerability (CNVD-2020-50950)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the Validator.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...

8.8CVSS7.8AI score0.01726EPSS
Exploits1References1
NVD
NVD
added 2020/09/01 5:15 p.m.6 views

CVE-2020-6135

An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.4AI score0.01726EPSS
Exploits1References1
OSV
OSV
added 2020/09/01 5:15 p.m.13 views

CVE-2020-6135

An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.9AI score
Exploits0References1
Prion
Prion
added 2020/09/01 5:15 p.m.11 views

Sql injection

An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

6.5CVSS8.9AI score0.01726EPSS
Exploits1References1Affected Software1
Talos
Talos
added 2020/08/31 12:0 a.m.69 views

OS4Ed openSIS Validator.php SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested Versions OS4Ed openSIS 7.3 Produc...

8.8CVSS7.9AI score0.01726EPSS
Exploits1
Packet Storm
Packet Storm
added 2015/06/17 12:0 a.m.26 views

Imagevue 2.8.9 XSS / Password Disclosure

| Title : Imagevue.v2.8.9 Multi Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : http://www.dl.persianscript.ir/script/Imagevue.v2.8.9.PHP.NULL-DGTPersianScript.ir.rar ======================================= App Msg Error :...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2010/01/30 12:0 a.m.18 views

Invision Power Board remote file disclosure exploit

No description provided by source. ! /usr/bin/env python3.1 validator.php | | | \ | | | | | | | | | | /| | || | | | | ||| |/ @expl0it... IPB Files / Directories Full Disclosure Vuln discovered by TinKode / xpl0it written by cmiN Greetz: insecurity.ro, darkc0de.com Special thanks for: cmiN...

7.1AI score
Exploits0
Rows per page
Query Builder