CVE-2020-6637 - openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php

CRITICAL

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php

Published Aug 24, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 20.06%

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://cinzinga.com/CVE-2020-6637/		x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27785		Advisory
https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8		x_refsource_MISCPatchThird Party Advisory
https://opensis.com/		x_refsource_MISCProduct
https://sourceforge.net/projects/opensis-ce/files/		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 24, 2020

Updated Aug 4, 2024

Reserved Jan 9, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 24, 2020

Updated Aug 4, 2024

GitHub

No data