deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6125
Published: 2020-09-01
Description: An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1074; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1074
CVE: CVE-2020-6126
Published: 2020-09-01
Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE: CVE-2020-6127
Published: 2020-09-01
Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE: CVE-2020-6128
Published: 2020-09-01
Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meet_date parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE: CVE-2020-6132
Published: 2020-09-01
Description: SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE: CVE-2020-6133
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE: CVE-2020-6134
Published: 2020-09-01
Description: SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE: CVE-2012-3336
Published: 2020-09-01
Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to multiple scripts, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 78282.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www-01.ibm.com/support/docview.wss?uid=swg21611130; https://exchange.xforce.ibmcloud.com/vulnerabilities/78282; http://www-01.ibm.com/support/docview.wss?uid=swg21611130
CVE: CVE-2012-3337
Published: 2020-09-01
Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing &quot;dot dot&quot; sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www-01.ibm.com/support/docview.wss?uid=swg21611129; https://exchange.xforce.ibmcloud.com/vulnerabilities/78284; http://www-01.ibm.com/support/docview.wss?uid=swg21611129
CVE: CVE-2020-23450
Published: 2020-09-01
Description: Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://spiceworks.com; https://abuyv.com; https://abuyv.com/cve/spiceworks-stored-xss
CVE: CVE-2020-23971
Published: 2020-09-01
Description: gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://packetstormsecurity.com/files/156889/Joomla-GMapFP-3.30-Arbitrary-File-Upload.html; https://packetstormsecurity.com/files/156889/Joomla-GMapFP-3.30-Arbitrary-File-Upload.html
CVE: CVE-2012-3338
Published: 2020-09-01
Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the create new user account functionality. An attacker could exploit this vulnerability to create unprivileged user accounts. IBM X-Force ID: 78286.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg21611126; https://exchange.xforce.ibmcloud.com/vulnerabilities/78286; http://www-01.ibm.com/support/docview.wss?uid=swg21611126
CVE: CVE-2012-3340
Published: 2020-09-01
Description: IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-776
References: http://www-01.ibm.com/support/docview.wss?uid=swg21611128; https://exchange.xforce.ibmcloud.com/vulnerabilities/78291; http://www-01.ibm.com/support/docview.wss?uid=swg21611128
CVE: CVE-2012-3341
Published: 2020-09-01
Description: IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21611131; https://exchange.xforce.ibmcloud.com/vulnerabilities/78294; http://www-01.ibm.com/support/docview.wss?uid=swg21611131
CVE: CVE-2020-15150
Published: 2020-09-01
Description: There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the paginate() function. This will potentially affect all current users of Paginator prior to version 1.0.0. The vulnerability has been patched in version 1.0.0 and all users should upgrade to this version immediately. Note that this patched version uses a dependency that requires an Elixir version >=1.5.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-94
References: https://github.com/duffelhq/paginator/blob/ccf0f37fa96347cc8c8a7e9eb2c64462cec4b2dc/README.md#security-considerations; https://github.com/duffelhq/paginator/commit/bf45e92602e517c75aea0465efc35cd661d9ebf8; https://github.com/duffelhq/paginator/security/advisories/GHSA-w98m-2xqg-9cvj
CVE: CVE-2020-23829
Published: 2020-09-01
Description: interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/boku7/LibreHealth-authRCE; https://www.exploit-db.com/exploits/48702; https://github.com/boku7/LibreHealth-authRCE
CVE: CVE-2020-23831
Published: 2020-09-01
Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/boku7/StockManagement-XSS-Login-CredHarvester; https://packetstormsecurity.com/files/158813/Tailor-MS-1.0-Cross-Site-Scripting.html; https://github.com/boku7/StockManagement-XSS-Login-CredHarvester
CVE: CVE-2020-23835
Published: 2020-09-01
Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/boku7/tailorMS-rXSS-Keylogger; https://www.exploit-db.com/exploits/48813; https://github.com/boku7/tailorMS-rXSS-Keylogger
CVE: CVE-2020-23836
Published: 2020-09-01
Description: A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/siamon123/warehouse-inventory-system/issues/55; https://www.exploit-db.com/exploits/48738; https://github.com/siamon123/warehouse-inventory-system/issues/55
CVE: CVE-2020-23839
Published: 2020-09-01
Description: A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.html; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1330; https://github.com/boku7/CVE-2020-23839
CVE: CVE-2020-6135
Published: 2020-09-01
Description: An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1078; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1078
CVE: CVE-2020-17405
Published: 2020-09-01
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSOAuth process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10980.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://www.zerodayinitiative.com/advisories/ZDI-20-1080/; https://www.zerodayinitiative.com/advisories/ZDI-20-1080/
CVE: CVE-2020-24034
Published: 2020-09-01
Description: Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/159026/Sagemcom-F-ST-5280-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2020/Sep/3; https://seclists.org/fulldisclosure/2020/Sep/3
CVE: CVE-2020-6136
Published: 2020-09-01
Description: An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1079; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1079
CVE: CVE-2020-6141
Published: 2020-09-01
Description: An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1081; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1081
CVE: CVE-2020-24556
Published: 2020-09-01
Description: A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000263632; https://success.trendmicro.com/solution/000263633; https://success.trendmicro.com/solution/000267260
CVE: CVE-2020-24557
Published: 2020-09-01
Description: A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
CVSS Score: 7.8 (HIGH)
References: https://success.trendmicro.com/solution/000263632; https://success.trendmicro.com/solution/000267260; https://www.zerodayinitiative.com/advisories/ZDI-20-1094/
CVE: CVE-2020-24558
Published: 2020-09-01
Description: A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000263632; https://success.trendmicro.com/solution/000267260; https://www.zerodayinitiative.com/advisories/ZDI-20-1095/
CVE: CVE-2020-24559
Published: 2020-09-01
Description: A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000263632; https://success.trendmicro.com/solution/000267260; https://www.zerodayinitiative.com/advisories/ZDI-20-1096/
CVE: CVE-2020-13946
Published: 2020-09-01
Description: In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-668
References: https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E; https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E; https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E
CVE: CVE-2020-16204
Published: 2020-09-01
Description: The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-912
References: http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html; http://seclists.org/fulldisclosure/2020/Sep/6; https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
CVE: CVE-2020-16206
Published: 2020-09-01
Description: The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html; http://seclists.org/fulldisclosure/2020/Sep/6; https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
CVE: CVE-2020-16208
Published: 2020-09-01
Description: The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html; http://seclists.org/fulldisclosure/2020/Sep/6; https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
CVE: CVE-2020-16210
Published: 2020-09-01
Description: The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions).
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html; http://seclists.org/fulldisclosure/2020/Sep/6; https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
CVE: CVE-2020-25069
Published: 2020-09-01
Description: USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.
CVSS Score: 9.8 (CRITICAL)
References: https://www.usvn.info/2020/08/02/usvn-1.0.10; https://www.usvn.info/2020/08/02/usvn-1.0.10
CVE: CVE-2020-25070
Published: 2020-09-01
Description: USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.usvn.info/2020/08/02/usvn-1.0.10; https://www.usvn.info/2020/08/02/usvn-1.0.10
CVE: CVE-2020-5776
Published: 2020-09-01
Description: Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.tenable.com/security/research/tra-2020-51; https://www.tenable.com/security/research/tra-2020-51
CVE: CVE-2020-5777
Published: 2020-09-01
Description: MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting max_connections (default 151) is lower than Apache (or another web server) setting MaxRequestWorkers (formerly MaxClients) (default 256). This can be done by sending at least 151 simultaneous requests to the Magento website to trigger a "Too many connections" error, then use default magmi:magmi basic authentication to remotely bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.tenable.com/security/research/tra-2020-51; https://www.tenable.com/security/research/tra-2020-51
CVE: CVE-2020-6137
Published: 2020-09-01
Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE: CVE-2020-6138
Published: 2020-09-01
Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE: CVE-2020-6139
Published: 2020-09-01
Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE: CVE-2020-6140
Published: 2020-09-01
Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080