Files
CVEs-PoC/2020/CVE-2020-6136.md
T
2025-09-29 21:09:30 +02:00

888 B

CVE-2020-6136

Description

An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

POC

Reference

Github