CVE-2020-6127

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-6127

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-6127.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-6127

Published

2020-09-01T15:15:12.297Z

Modified

2025-11-14T11:04:26.315626Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075

Affected packages

Git / github.com/os4ed/opensis-responsive-design

Affected ranges

Type: GIT
Repo: https://github.com/os4ed/opensis-responsive-design
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

1a618f9606af177af1f137d1424ff7b3c4b14b56

Affected versions

Ver7.*

Ver7.0Prod

Ver7.0Prod_update

Ver7.0beta1

v7.*

v7.1

v7.2

v7.3

ver7.*

ver7.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-6127.json"