CVE-2020-6134

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-6134
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6134.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-6134
Published
2020-09-01T15:15:12Z
Modified
2026-08-27T08:14:24Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

References

Affected packages

Git / github.com/OS4ED/openSIS-Classic

Affected ranges

Type
GIT
Repo
https://github.com/OS4ED/openSIS-Classic
Events
Introduced
1a618f9606af177af1f137d1424ff7b3c4b14b56
Last Affected
1a618f9606af177af1f137d1424ff7b3c4b14b56
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:os4ed:opensis:7.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.3"
        },
        {
            "last_affected": "7.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

7.*
7.3
v7.*
v7.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6134.json"

Git / github.com/os4ed/opensis-classic

Affected ranges

Type
GIT
Repo
https://github.com/os4ed/opensis-classic
Events
Introduced
1a618f9606af177af1f137d1424ff7b3c4b14b56
Last Affected
1a618f9606af177af1f137d1424ff7b3c4b14b56
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:os4ed:opensis:7.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.3"
        },
        {
            "last_affected": "7.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

7.*
7.3
v7.*
v7.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6134.json"