6.4
Medium
CVE-2020-6127 SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3
Description
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OS4Ed | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of OS4Ed
The 26 CVEs of OS4Ed →
CVE-2020-6144
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4
10.0
Critical
CVE-2020-6143
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4
10.0
Critical
CVE-2020-6142
A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3
9.9
Critical
CVE-2020-6140
SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3
9.8
Critical