CVE-2020-6138

CVE-2020-6138

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability.

Source: CVE-2020-6138

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다