openSIS SQL Injection Vulnerability (CNVD-2020-50950)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the Validator.php function in OS4Ed openSIS 7.3, which can be exploited by an attacker sending a specially crafted HTTP request to conduct a SQL injection attack...