CVE-2020-6132: SQL Injection
Published Sep 1, 2020
·Updated
SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
1 affected component
OS4ED openSIS=7.3
Event History
Sep 1, 2020
CVE Published
via MITRE·02:24 PM
Data Sourced
via MITRE·02:24 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-6132.
2
What is the severity of CVE-2020-6132?
The severity of CVE-2020-6132 is high.
3
What software is affected by CVE-2020-6132?
OS4Ed OpenSIS version 7.3 is affected by CVE-2020-6132.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-89.
5
How can I mitigate the risk of CVE-2020-6132?
To mitigate the risk of CVE-2020-6132, apply the latest security patches or updates provided by OS4Ed for OpenSIS version 7.3, and validate user input to prevent SQL injection attacks.