PT-2020-18948 · Os4Ed · Os4Ed Opensis

Published 2020-09-01 · Updated 2022-05-31 · CVE-2020-6134

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3

Description The issue concerns SQL injection vulnerabilities found in the ID parameters of certain pages in OS4Ed openSIS. Specifically, the id parameter in the MassDropModal.php page is vulnerable to SQL injection. An attacker can exploit this by making an authenticated HTTP request to the vulnerable endpoint, such as "/MassDropModal.php", using the vulnerable id parameter.

Recommendations For OS4Ed openSIS version 7.3, as a temporary workaround, consider restricting access to the MassDropModal.php page and avoid using the id parameter in authenticated HTTP requests until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-6134

Affected Products

Os4Ed Opensis

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-6134 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6134 · Vendor Advisory