Lucene search

Os4ed Security Vulnerabilities

cve

CVE-2020-6130

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6131

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6121

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6118

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6119

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6120

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

8.9AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6123

An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheck.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

8.9AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6117

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

9.1AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6122

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this...

8.8CVSS

8.9AI Score

0.001EPSS

2020-09-01 02:15 PM

cve

CVE-2020-6637

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of...

9.8CVSS

9.7AI Score

0.024EPSS

2020-08-24 07:15 PM

cve

CVE-2020-13380

openSIS before 7.4 allows SQL...

9.8CVSS

9.7AI Score

0.003EPSS

2020-07-01 03:15 PM

cve

CVE-2020-13381

openSIS through 7.4 allows SQL...

9.8CVSS

9.6AI Score

0.074EPSS

2020-07-01 03:15 PM

cve

CVE-2020-13382

openSIS through 7.4 has Incorrect Access...

9.1CVSS

9.2AI Score

0.337EPSS

2020-07-01 03:15 PM

cve

CVE-2020-13383

openSIS through 7.4 allows Directory...

7.5CVSS

7.5AI Score

0.274EPSS

2020-07-01 03:15 PM

cve

CVE-2013-1349

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname...

7.8AI Score

0.703EPSS

2013-12-09 04:36 PM

Total number of security vulnerabilities65