Vulnerabilities > Os4Ed

DATE CVE VULNERABILITY TITLE RISK
2020-09-01 CVE-2020-6129 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6123 SQL Injection vulnerability in Os4Ed Opensis 7.3
An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6122 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6121 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6120 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6119 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6118 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-09-01 CVE-2020-6117 SQL Injection vulnerability in Os4Ed Opensis 7.3
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3.
network
low complexity
os4ed CWE-89
8.8
2020-08-24 CVE-2020-6637 SQL Injection vulnerability in Os4Ed Opensis 7.3
openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.
network
low complexity
os4ed CWE-89
critical
9.8
2020-07-01 CVE-2020-13383 Path Traversal vulnerability in Os4Ed Opensis
openSIS through 7.4 allows Directory Traversal.
network
low complexity
os4ed CWE-22
7.5