← Back to CVE List

CVE-2020-6126

Published: 2020-09-01T15:15Z
Last Modified: 2024-11-21T05:35Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt