Os4ed

Opensis

84 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2020-6143

Exploit
  • EPSS 6.17%
  • Veröffentlicht 01.09.2020 21:15:13
  • Zuletzt bearbeitet 21.11.2024 05:35:11

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker ca...

9.8

CVE-2020-6142

Exploit
  • EPSS 9.24%
  • Veröffentlicht 01.09.2020 21:15:13
  • Zuletzt bearbeitet 21.11.2024 05:35:11

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.

9.8

CVE-2020-6140

Exploit
  • EPSS 2.63%
  • Veröffentlicht 01.09.2020 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:11

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request t...

9.8

CVE-2020-6137

Exploit
  • EPSS 2.63%
  • Veröffentlicht 01.09.2020 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:10

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request t...

9.8

CVE-2020-6138

Exploit
  • EPSS 2.63%
  • Veröffentlicht 01.09.2020 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:11

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this...

9.8

CVE-2020-6139

Exploit
  • EPSS 2.63%
  • Veröffentlicht 01.09.2020 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:11

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request t...

9.8

CVE-2020-6141

Exploit
  • EPSS 3.94%
  • Veröffentlicht 01.09.2020 18:15:15
  • Zuletzt bearbeitet 21.11.2024 05:35:11

An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

8.8

CVE-2020-6136

Exploit
  • EPSS 1.8%
  • Veröffentlicht 01.09.2020 18:15:15
  • Zuletzt bearbeitet 21.11.2024 05:35:10

An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

8.8

CVE-2020-6135

Exploit
  • EPSS 1.8%
  • Veröffentlicht 01.09.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:10

An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

8.8

CVE-2020-6128

Exploit
  • EPSS 1.77%
  • Veröffentlicht 01.09.2020 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:09

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meet_date parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attack...