PT-2020-18941
CVE-2020-6127
·
تاريخ النشر
2020-09-01
·
تاريخ التحديث
2022-05-31
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
openSIS version 7.3
Description
A SQL injection issue exists in the CoursePeriodModal.php page. The
id parameter in this page is vulnerable to SQL injection, allowing an attacker to trigger the issue with an authenticated HTTP request.Recommendations
For openSIS version 7.3, consider restricting access to the CoursePeriodModal.php page until a fix is available, and avoid using the
id parameter in this page to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾