Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS

mood · Aug 31, 2020

Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS
August 31, 2020
https://blog.talosintelligence.com/2020/08/vuln-spotlight-opensis-aug-2020.html

Cisco Talos researchers recently discovered multiple vulnerabilities in the OpenSIS software family. OpenSIS is a student information management system for K-12 students.

It is available in commercial and open-source versions and allows schools to create schedules and track attendance, grades and transcripts. An adversary could take advantage of these bugs to carry out a range of malicious activities, including SQL injection and remote code execution.
Click to expand...

In accordance with our coordinated disclosure policy, Cisco Talos worked with OpenSIS to ensure that these issues are resolved and that an update is available for affected customers.
Versions tested
Talos tested and confirmed that this vulnerability affects OS4Ed openSIS, version 7.4.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS

mood Updates Team

Log in or Sign up

Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS

mood Updates Team

Useful Searches