CVEブラウザに戻る

CVE-2020-6637

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0490%

EPSS Percentile41.28th

Published2020年8月24日

Last Modified2024年11月21日

Vulnerability Description

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.

Affected Platforms (CPE)

📦

Os4ed

Opensis

= 7.3

References & Advisories

🔗 https://cinzinga.com/CVE-2020-6637/

🔗 https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8

🔗 https://opensis.com/

🔗 https://sourceforge.net/projects/opensis-ce/files/

🔗 https://cinzinga.com/CVE-2020-6637/

🔗 https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8

🔗 https://opensis.com/

🔗 https://sourceforge.net/projects/opensis-ce/files/

関連する脆弱性情報

CVE-2020-61419.8

An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP reques...

CVE-2020-133819.8

openSIS through 7.4 allows SQL Injection.

CVE-2020-133809.8

openSIS before 7.4 allows SQL Injection.

CVE-2020-61409.8

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in t...