CVE-2020-6127: SQL Injection
Published Sep 1, 2020
·Updated
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
1 affected component
OS4ED openSIS=7.3
Event History
Sep 1, 2020
CVE Published
via MITRE·02:14 PM
Data Sourced
via MITRE·02:14 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-6127?
CVE-2020-6127 is a SQL injection vulnerability that exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3.
2
How severe is CVE-2020-6127?
CVE-2020-6127 has a severity score of 8.8, which is classified as high.
3
Which software versions are affected by CVE-2020-6127?
CVE-2020-6127 affects OS4Ed openSIS 7.3.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-6127?
The Common Weakness Enumeration (CWE) ID for CVE-2020-6127 is CWE-89.
5
How can I fix the SQL injection vulnerability in CoursePeriodModal.php?
To fix the SQL injection vulnerability in CoursePeriodModal.php, you should implement proper input validation and use parameterized queries or prepared statements.