CVE-2020-6136

CVE-2020-6136

An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Source: CVE-2020-6136

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다