CVE-2020-13381 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

CVE-2020-13381

CRITICAL 9.8CVE-2020-13381 · Published 01/07/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
opensis os4ed	`≤ 7.4`	No fix yet

Description

openSIS through 7.4 allows SQL Injection.

References

packetstormsecurity.com/files/158331/openSIS-7.4-Unauthenticated-PHP-Code-Execution.html · Exploit
OS4ED/openSIS-Responsive-Design · Third Party Advisory
packetstormsecurity.com/files/158257/openSIS-7.4-SQL-Injection.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free