Approved changes feed: RSS · Atom

cpe:2.3:a:os4ed:opensis:7.3:*:*:*:*:*:*:*

part: a version: 7.3 update: *

VendorOs4Ed (6cbf6094-577e-5750-94b1-eb009ed7d213)
ProductOpensis (0102caef-70bb-54b8-8259-c29cfbe58261)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/os4ed/opensis-classic purl2cpe 2026-06-01 10:13:28.382795

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6141 vulnerable 2026-06-08 05:26:44.592538 Details available
CRITICAL (9.8)
An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2020-09-01T17:31:10.000Z
Updated: 2024-08-04T08:55:21.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6136 vulnerable 2026-06-08 05:26:44.590395 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2020-09-01T17:11:22.000Z
Updated: 2024-08-04T08:55:21.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6135 vulnerable 2026-06-08 05:26:44.590087 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2020-09-01T16:20:09.000Z
Updated: 2024-08-04T08:55:21.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6134 vulnerable 2026-06-08 05:26:44.589698 Details available
MEDIUM (6.4)
SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2020-09-01T14:25:19.000Z
Updated: 2024-08-04T08:55:21.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6133 vulnerable 2026-06-08 05:26:44.589276 Details available
MEDIUM (6.4)
SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2020-09-01T14:24:56.000Z
Updated: 2024-08-04T08:55:21.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6132 vulnerable 2026-06-08 05:26:44.588857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6131 vulnerable 2026-06-08 05:26:44.588366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6130 vulnerable 2026-06-08 05:26:44.587952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6129 vulnerable 2026-06-08 05:26:44.587515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6128 vulnerable 2026-06-08 05:26:44.587195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6127 vulnerable 2026-06-08 05:26:44.586869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6126 vulnerable 2026-06-08 05:26:44.586539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6125 vulnerable 2026-06-08 05:26:44.586052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6124 vulnerable 2026-06-08 05:26:44.585605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.