CVE-2020-6121: SQL Injection
Published Sep 1, 2020
·Updated
SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
1 affected component
OS4ED openSIS=7.3
Event History
Sep 1, 2020
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this SQL injection vulnerability?
The vulnerability ID is CVE-2020-6121.
2
What software version is affected by this SQL injection vulnerability?
OS4Ed OpenSIS version 7.3 is affected by this SQL injection vulnerability.
3
What is the severity rating of CVE-2020-6121?
The severity rating of CVE-2020-6121 is high (8.8).
4
Which page is vulnerable to SQL injection in OS4Ed OpenSIS 7.3?
The CheckDuplicateStudent.php page in OS4Ed OpenSIS 7.3 is vulnerable to SQL injection.
5
How can an attacker exploit this SQL injection vulnerability?
An attacker can make an authenticated HTTP request to trigger this SQL injection vulnerability.